CVE-2019-17658: Critical severity fortinet forticlient ssl vpn vulnerability
Published Mar 12, 2020
·Updated
An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.
Affected Software
2 affected components
Fortinet FortiClient Windows>=6.0.0<=6.0.9
Fortinet FortiClient Windows>=6.2.0<=6.2.2
Event History
Mar 12, 2020
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-17658?
CVE-2019-17658 is an unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows.
2
How does CVE-2019-17658 affect FortiClient?
CVE-2019-17658 affects FortiClientWindows versions 6.2.2 and prior.
3
What can an attacker do with CVE-2019-17658?
An attacker can gain elevated privileges via the FortiClientConsole executable service path.
4
What is the severity of CVE-2019-17658?
CVE-2019-17658 has a severity rating of 9.8 (Critical).
5
How can I fix CVE-2019-17658?
To fix CVE-2019-17658, update FortiClientWindows to a version that is not affected by this vulnerability.