CVE-2019-15711

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@fortinet.com

Published

2020-02-06

Last modified

2024-10-25

Affected products

• Forticlient (Fortinet)
• Fortinet Forticlientlinux (Fortinet)

References

• https://danishcyberdefence.dk/blog/forticlient_linux
• https://fortiguard.com/psirt/FG-IR-19-238