4.0
Medium
CVE-2023-44248 An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below,…
Description
An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiEDR 5.0 | 5.0.0 → 5.0.3 | No fix stated |
| FortiEDR | 4.0.0 | No fix stated |
| FortiEDR CollectorWindows 5.0 | 5.0.0 → 5.0.2 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified