PT-2019-6273 · Fortinet · Forticlient

Published 2019-11-05 · Updated 2020-08-24 · CVE-2019-16155

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below FortiClient for Linux versions 6.2.2 and below

Description The issue is related to a privilege escalation vulnerability in the implementation of the backup configuration script. It is caused by insufficient access control, allowing an attacker to send specially crafted IPC requests to elevate their privileges. This can enable a low-privilege user to overwrite system files with arbitrary content as root through the system backup file. Additionally, the vulnerability can be exploited through the GUI, allowing a low-privilege user to write the system backup file under root privilege.

Recommendations For FortiClient for Linux versions 6.2.1 and below, update to a version above 6.2.1 to resolve the issue. For FortiClient for Linux versions 6.2.2 and below, restrict access to the GUI backup configuration feature to prevent low-privilege users from writing the system backup file under root privilege until a patch is available.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-264

CWE-269

Related Identifiers

BDU:2022-06504

CVE-2019-16155

Affected Products

Forticlient

References · 5

• 🔥 https://danishcyberdefence.dk/blog/forticlient_linux · Exploit
• https://fortiguard.com/psirt/FG-IR-19-238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-16155 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16155 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06504 · Security Note