PT-2019-1766 · Fortinet · Forticlientmac

Published 2019-04-02 · Updated 2020-08-24 · CVE-2019-5585

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiClientMac versions prior to 6.0.5

Description The issue is related to improper access control, which may allow an attacker to affect the application's performance by modifying the contents of a file used by several processes. This could potentially lead to a denial of service using specially crafted files.

Recommendations For versions prior to 6.0.5, update to version 6.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the files used by FortiClientMac processes to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-01407

CVE-2019-5585

Affected Products

Forticlientmac

References · 7

• https://fortiguard.com/advisory/FG-IR-19-003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5585 · Security Note
• https://bdu.fstec.ru/vul/2019-01407 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5585 · Vendor Advisory
• https://securityfocus.com/bid/107693/info · Note
• http://securityfocus.com/bid/107693 · Note
• https://fortiguard.com/psirt/FG-IR-19-003 · Note