VULNERABILITY INTELLIGENCE
CVE-2019-15711
CVSS score7.8 HIGH
EPSS probability0.52%
CISA KEVNot currently listed
Published2020-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@fortinet.com — Exploit, Third Party Advisory
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory