CVE-2020-15941 | THREATINT

Description

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

Reserved 2020-07-24 | Published 2021-10-06 | Updated 2024-10-25 | Assigner fortinet

MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:F/RL:X/RC:X

Problem types

Escalation of privilege

Product status

FortiClientEMS 6.4.1, 6.4.0, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0

affected

References

fortiguard.com/advisory/FG-IR-20-074

cve.org (CVE-2020-15941)

nvd.nist.gov (CVE-2020-15941)

Download JSON