CVE-2020-15941

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@fortinet.com

Published

2021-10-06

Last modified

2024-10-25

Weaknesses

CWE-22

Affected products

• Forticlient Endpoint Management Server (Fortinet)
• Fortinet Forticlientems (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-20-074