An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fortinet forticlient |
||
fortinet forticlient virtual private network |
Vulmon