Description (CNA)
An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiConverter | affected 7.0.0; affected 6.2.0 through 6.2.1; affected 6.0.0 through 6.0.3 |
| Fortinet / FortiClientWindows | affected 7.0.0 through 7.0.6; affected 6.4.0 through 6.4.8 |
CWE
CWE-276
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.