8.4
High
CVE-2021-43066 A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below,…
Description
A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiClientWindows | Versions not published |
Other CVEs of Fortinet FortiClientWindows
The 8 CVEs of Fortinet FortiClientWindows →
CVE-2021-41031
A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior…
7.8
High
CVE-2022-26113
An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0…
7.7
High
CVE-2021-44169
A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version…
8.2
High
CVE-2021-36167
An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8…
4.3
Medium