5.4
Medium
CVE-2020-15941 A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an…
Description
A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiClientEMS | Versions not published |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of Fortinet FortiClientEMS
The 5 CVEs of Fortinet FortiClientEMS →
CVE-2021-36189
A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below…
6.8
Medium
CVE-2021-41030
An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4…
5.4
Medium
CVE-2020-15940
An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and…
4.1
Medium
CVE-2021-24019
An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and…
8.1
High