Skip to content
Sign in
6.7 Medium

CVE-2021-26089 An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute…

Description

An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiClientMac Versions not published

Other CVEs of Fortinet FortiClientMac

The 3 CVEs of Fortinet FortiClientMac →
CVE-2022-33878 An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions… 2.2 Low CVE-2021-42754 An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and… 3.2 Low
Track this CVE