Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
文件名或路径的外部可控制
Vulnerability Title
Fortinet FortiClientMAC 安全漏洞
Vulnerability Description
Fortinet FortiClientMAC是美国飞塔（Fortinet）公司的一款基于macOS平台的安全防护工具。 Fortinet FortiClientMAC 7.2.3及之前版本和7.0.10及之前版本存在安全漏洞，该漏洞源于文件名或路径的外部控制，可能导致本地攻击者在安装过程开始前通过写入恶意配置文件执行任意代码或命令。
CVSS Information
N/A
Vulnerability Type
N/A