CVE-2020-15934: Root privilege escalation in FortiClient Linux
An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15934?
CVE-2020-15934 is categorized as a critical vulnerability due to its potential to allow local privilege escalation to root.
How do I fix CVE-2020-15934?
To fix CVE-2020-15934, update FortiClient to version 6.2.8 or later, or 6.4.1 or later.
Who is affected by CVE-2020-15934?
CVE-2020-15934 affects FortiClient for Linux versions 6.2.7 and below, and version 6.4.0.
What type of vulnerability is CVE-2020-15934?
CVE-2020-15934 is an execution with unnecessary privileges vulnerability in the VCM engine of FortiClient.
Can local users exploit CVE-2020-15934?
Yes, local users can exploit CVE-2020-15934 to elevate their privileges to root by creating a malicious script or program.