CVE-2021-26089

An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@fortinet.com

Published

2021-07-12

Last modified

2024-10-25

Weaknesses

CWE-59

Affected products

• Forticlient (Fortinet)
• Fortinet Forticlientmac (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-022
• https://www.zerodayinitiative.com/advisories/ZDI-22-078/