CVE-2021-22127 - CERT CVE
ID CVE-2021-22127
Sažetak An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name.
Reference
CVSS
Base: 7.9
Impact: 10.0
Exploitability:5.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:A/AC:M/Au:N/C:C/I:C/A:C
Zadnje važnije ažuriranje 13-04-2022 - 18:00
Objavljeno 06-04-2022 - 16:15