CVE-2020-9290
15.03.2020, 22:15
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | forticlient | 𝑥 ≤ 6.2.3 |
| fortinet | forticlient_virtual_private_network | 𝑥 ≤ 6.2.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-426 - Untrusted Search PathThe application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.
- CWE-427 - Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.