Fortinet FortiAuthenticator Unspecified Local Privilege Escalation Vulnerability
BID:64610
Info
Fortinet FortiAuthenticator Unspecified Local Privilege Escalation Vulnerability
| Bugtraq ID: | 64610 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-6990 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 15 2013 12:00AM |
| Updated: | Dec 15 2013 12:00AM |
| Credit: | Yvan Janssens |
| Vulnerable: |
Fortinet FortiAuthenticator 2.0 Fortinet FortiAuthenticator 1.0 |
| Not Vulnerable: |
Fortinet FortiAuthenticator 3.0 |
Discussion
Fortinet FortiAuthenticator Unspecified Local Privilege Escalation Vulnerability
Fortinet FortiAuthenticator is prone to an unspecified local privilege-escalation.
Local attackers can exploit this issue to gain access to the system shell and run arbitrary shell commands with elevated privileges.
Fortinet FortiAuthenticator 1.x and 2.x are vulnerable.
Fortinet FortiAuthenticator is prone to an unspecified local privilege-escalation.
Local attackers can exploit this issue to gain access to the system shell and run arbitrary shell commands with elevated privileges.
Fortinet FortiAuthenticator 1.x and 2.x are vulnerable.
Exploit / POC
Fortinet FortiAuthenticator Unspecified Local Privilege Escalation Vulnerability
Attackers require local interactive access to exploit this issue.
Attackers require local interactive access to exploit this issue.
Solution / Fix
Fortinet FortiAuthenticator Unspecified Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Fortinet FortiAuthenticator Unspecified Local Privilege Escalation Vulnerability
References:
References:
- FortiAuthenticator Homepage (Fortinet)
- FortiAuthenticator Privilege Escalation Vulnerability (Fortinet)