FortiClient privilege escalation vulnerability

Summary

A low privileged user may be able to execute arbitrary code by exploiting a FortiClientNamedPipe vulnerability.

Description

A low privileged user may be able to execute arbitrary code by exploiting a FortiClientNamedPipe vulnerability.

Affected Products

FortiClientWindows 5.4.1, 5.4.2.

Solutions

Upgrade to FortiClient Windows: 5.4.3 or 5.6.0

Acknowledgement

Fortinet is pleased to thank Zhipeng Huo from Tencent Technology Company Limited for reporting this vulnerability under responsible disclosure.