CoreCVE
Back

HIGH

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory

Published Mar 15, 2020

Description

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-427

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner fortinet
Published Mar 15, 2020
Updated Oct 25, 2024
Reserved Feb 19, 2020
Link CVE-2020-9290
CISA Vulnrichment
Updated Oct 24, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-9290
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-9290