Description
A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial of service via sending a crafted request to a specific named pipe.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High
E
High
RL
Unchanged
RC
Changed
Affected products
- fortinet / forticlientwindows7.0.0 – 7.0.7
- fortinet / forticlientwindows6.4.0 – 6.4.8
- fortinet / forticlientwindows6.2.0 – 6.2.9
- fortinet / forticlientwindows6.0.0 – 6.0.10
References
- VENDOR_ADVISORYhttps://fortiguard.com/psirt/FG-IR-22-299