CVE-2020-15941: Path Traversal

Q: What is CVE-2020-15941?

CVE-2020-15941 is a path traversal vulnerability in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below.

Q: What is the severity of CVE-2020-15941?

The severity of CVE-2020-15941 is medium with a CVSS score of 5.4.

Q: How does CVE-2020-15941 affect FortiClientEMS?

CVE-2020-15941 may allow an authenticated attacker to inject directory traversal sequences and manipulate files on the server via the name parameter of Deployment Packages.

Q: Which versions of FortiClientEMS are affected by CVE-2020-15941?

FortiClientEMS versions 6.4.1 and below, and 6.2.8 and below are affected by CVE-2020-15941.

Q: How can I fix CVE-2020-15941?

Update FortiClientEMS to version 6.4.2 or above, or version 6.2.9 or above to mitigate CVE-2020-15941.

Published Oct 6, 2021

Updated

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

Affected Software

2 affected components

Fortinet Forticlient Endpoint Management Server<6.2.9

Fortinet Forticlient Endpoint Management Server>=6.4.0<6.4.2

Event History

Oct 6, 2021

CVE Published

via MITRE·09:27 AM

Data Sourced

via MITRE·09:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-15941?

CVE-2020-15941 is a path traversal vulnerability in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below.

What is the severity of CVE-2020-15941?

The severity of CVE-2020-15941 is medium with a CVSS score of 5.4.

How does CVE-2020-15941 affect FortiClientEMS?