Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-33877

An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 th

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiConverter

Default version status: unaffected

  • 7.0.0affected
  • 6.2.0 to ≤ 6.2.1affected
  • 6.0.0 to ≤ 6.0.3affected

Fortinet FortiClientWindows

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.6affected
  • 6.4.0 to ≤ 6.4.8affected

References