| IR Number | FG-IR-21-154 |
| Date | May 3, 2022 |
| Severity |
High |
| CVSSv3 Score | 8.8 |
| Impact | Escalation of privilege |
| CVE ID | CVE-2021-43066 |
| Affected Products |
FortiClientWindows
:
7.0.2, 7.0.1, 7.0.0, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.10, 6.0.1, 6.0.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiClient - Privilege escalation in FortiClient installer
Summary
An external control of file name or path vulnerability [CWE-73] in FortiClient Windows may allow an unprivileged attacker to delete or execute files with admin rights via the MSI installer.
Affected Products
FortiClientWindows version 7.0.0 through 7.0.2FortiClientWindows version 6.4.0 through 6.4.6
FortiClientWindows 6.2 all versions
FortiClientWindows 6.0 all versions
Solutions
Upgrade to FortiClient 7.0.3 or above
Upgrade to FortiClient 6.4.7 or above