Privilege Escalation Vulnerability in FortiClient for Linux 6.2.1 and Below via Specially Crafted IPC Requests

CVE-2019-15711 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.