CVE-2020-9290

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@fortinet.com

Published

2020-03-15

Last modified

2026-10-13

Weaknesses

CWE-426, CWE-427

Affected products

• Forticlient (Fortinet)
• Forticlient Virtual Private Network (Fortinet)
• Forticlientwindows (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-19-060
• https://fortiguard.com/psirt/FG-IR-19-060