CVE-2016-8493
high
CVSS v3
8.8
CVSS v2
9.0
VIR risk
8.8
Description
In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.
Predictions
Exploit likelihood
92%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@fortinet.com — https://fortiguard.com/psirt/FG-IR-16-095
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| fortinet | forticlient | 5.4.1 | |
| fortinet | forticlient | 5.4.2 | |
References
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.