PT-2019-1766 · Fortinet · Forticlientmac

Publicado 2019-04-02 · Atualizado 2020-08-24 · CVE-2019-5585

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiClientMac versions prior to 6.0.5

Description The issue is related to improper access control, which may allow an attacker to affect the application's performance by modifying the contents of a file used by several processes. This could potentially lead to a denial of service using specially crafted files.

Recommendations For versions prior to 6.0.5, update to version 6.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the files used by FortiClientMac processes to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-01407

CVE-2019-5585

Produtos afetados

Forticlientmac

Referências · 7

• https://securityfocus.com/bid/107693/info · Nota
• http://securityfocus.com/bid/107693 · Nota
• https://fortiguard.com/psirt/FG-IR-19-003 · Nota
• https://fortiguard.com/advisory/FG-IR-19-003 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5585 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-01407 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5585 · Aviso do Fabricante