CVE-2019-17650: OS Command Injection
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this FortiClient vulnerability?
The vulnerability ID of this FortiClient vulnerability is CVE-2019-17650.
What is the title of this vulnerability?
The title of this vulnerability is 'An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes'.
What is the description of this vulnerability?
The description of this vulnerability is that a local user of the system on which FortiClient for Mac OS is running may be able to execute unauthorized code as root by bypassing a security check due to an improper neutralization of special elements used in a command.
What is the severity of CVE-2019-17650?
The severity of CVE-2019-17650 is high with a CVSS score of 7.8.
How can I fix this vulnerability in FortiClient for Mac OS version 6.2.1?
To fix this vulnerability, you should update FortiClient for Mac OS to a version that is not affected by the vulnerability. Check with the vendor for the latest updates and patches.