CVE Daily

CVE-2021-36183

An improper authorization vulnerability [CWE-285] in FortiClient for Windows ver...

High CVSS 7.4

Overview

An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates.

CWE: N/A Published: 2021-11-02T19:15:07.830
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.4 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags