PT-2017-17676 · Microsoft+1 · Windows+1

Publicado 2017-12-14 · Atualizado 2019-10-03 · CVE-2017-7344

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient Windows versions 5.4.3 and earlier Fortinet FortiClient Windows version 5.6.0

Description A privilege escalation issue allows an attacker to gain privileges by exploiting the Windows "security alert" dialog that pops up when the "VPN before logon" feature is enabled and an untrusted certificate chain is present.

Recommendations For Fortinet FortiClient Windows versions 5.4.3 and earlier, consider disabling the "VPN before logon" feature until a patch is available. For Fortinet FortiClient Windows version 5.6.0, consider disabling the "VPN before logon" feature until a patch is available. As a temporary workaround, restrict access to the Windows "security alert" dialog when an untrusted certificate chain is detected to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2017-7344

Produtos afetados

Forticlient

Windows

Referências · 5

• 🔥 https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-7344 · Nota de Segurança
• https://fortiguard.com/advisory/FG-IR-17-070 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7344 · Aviso do Fabricante
• http://securityfocus.com/bid/102176 · Nota