CVE-2020-15934 HIGH

CVE-2020-15934

Vendor Fortinet
Product FortiClientLinux
Weakness CWE-269
Published December 19, 2024
Last update December 20, 2024
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X

What the vulnerability does

01Description

An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine.

Key dates

02Disclosure timeline

December 19, 2024 CVE published
December 20, 2024 Record updated