CVE-2017-7344

N/A

Descricao

A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado12/14/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

fortinet:forticlient

Referencias

http://www.securityfocus.com/bid/102176(psirt@fortinet.com)

https://fortiguard.com/advisory/FG-IR-17-070(psirt@fortinet.com)

https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/(psirt@fortinet.com)

http://www.securityfocus.com/bid/102176(af854a3a-2127-422b-91ae-364da2661108)

https://fortiguard.com/advisory/FG-IR-17-070(af854a3a-2127-422b-91ae-364da2661108)

https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.