CVE-2020-9287
15.03.2020, 22:15
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | forticlient_emergency_management_server | 𝑥 ≤ 6.2.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | forticlientems | 6.2.0 ≤ 𝑥 ≤ 6.2.1 | CNA |
| fortinet | forticlientems | 6.0.8 | CNA |
| fortinet | forticlientems | 6.0.0 ≤ 𝑥 ≤ 6.0.6 | CNA |
| fortinet | forticlientems | 6.0.0 ≤ 𝑥 < 6.1.0 | CNA |
Common Weakness Enumeration
- CWE-426 - Untrusted Search PathThe application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.
- CWE-427 - Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.