Vulnerability · Published Jul 12, 2021 · Assigned by fortinet
CVE-2021-26089
Medium 6.7
In plain English
A medium-severity security flaw in Fortinet FortiClientMac from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.4%top 62.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortinet FortiClientMac | FortiClientMac 6.4.3 and below |
References
- https://fortiguard.com/advisory/FG-IR-21-022 x_refsource_CONFIRM
- https://www.zerodayinitiative.com/advisories/ZDI-22-078/ x_refsource_MISC