| Package | Affected versions | Patched versions |
|---|---|---|
| forticlient | ≥ 6.4.0, ≤ 6.4.2≥ 7.0.0, ≤ 7.0.1 |
An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free