Skip to content
fr Sign in
7.8 High

CVE-2021-41031 A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior…

Description

A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiClientWindows Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiClientWindows

The 8 CVEs of Fortinet FortiClientWindows →
CVE-2022-26113 An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0… 7.7 High CVE-2021-43066 A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below,… 8.4 High CVE-2021-44169 A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version… 8.2 High CVE-2021-36167 An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8… 4.3 Medium
Track this CVE