Fortinet FortiClient CVE-2019-5585 Access Bypass Vulnerability

Bugtraq ID:	107693
Class:	Access Validation Error
CVE:	CVE-2019-5585
Remote:	Yes
Local:	No
Published:	Apr 02 2019 12:00AM
Updated:	Apr 02 2019 12:00AM
Credit:	Antonio Zeki
Vulnerable:	Fortinet FortiClient 6.0.4 Fortinet FortiClient 6.0.3 Fortinet FortiClient 6.0.2 Fortinet FortiClient 6.0.1
Not Vulnerable:	Fortinet FortiClient 6.0.5

Fortinet FortiClient CVE-2019-5585 Access Bypass Vulnerability

Fortinet FortiClient is prone to an access-bypass vulnerability.

Attackers can exploit this issue to bypass security restrictions to perform unauthorized actions and cause denial-of-service condition; this may aid in launching further attacks.

Fortinet FortiClient versions 6.0.1, 6.0.2, 6.0.3 and 6.0.4 are vulnerable.

Fortinet FortiClient CVE-2019-5585 Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Fortinet FortiClient CVE-2019-5585 Access Bypass Vulnerability

References:

• Fortinet Homepage (Fortinet)
  
• FortiClient Mac is vulnerable to a local denial of service. (Fortinet)