CVE-2019-17650 - An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check

Back Back to CVE browser

HIGH

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check

Published Nov 21, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.44%

Description

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check.

Affected products

Vendor Fortinet Product FortiClient for Mac OS Default
n/a
- Version
  FortiClient for Mac OS 6.2.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fortinet

FortiClient for Mac OS

n/a

Version	Status	Constraints
FortiClient for Mac OS 6.2.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://danishcyberdefence.dk/blog/forticlient_mac
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7956
Advisory
https://fortiguard.com/advisory/FG-IR-19-210
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://danishcyberdefence.dk/blog/forticlient_mac		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7956		Advisory
https://fortiguard.com/advisory/FG-IR-19-210		x_refsource_CONFIRMVendor Advisory