CVE-2020-9291 | THREATINT

Description

An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.

Reserved 2020-02-19 | Published 2020-06-01 | Updated 2024-10-25 | Assigner fortinet

MEDIUM: 6.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Problem types

Improper Access Control, Privilege Escalation

Product status

FortiClient for Windows 6.2.1 and earlier and FortiClient for Windows 6.0.9 and earlier

affected

References

fortiguard.com/psirt/FG-IR-20-040

cve.org (CVE-2020-9291)

nvd.nist.gov (CVE-2020-9291)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.