CVE-2020-15941

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory…

Medium · published October 6, 2021

CVSS v3.1
5.4
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:F/RL:X/RC:X
CVSS v4.0
Not supplied
EPSS
0.01146 · 66.5th percentile
Published
2021-10-06T09:27Z
EPSS history
Timeline
  • 06 OCT 09:27Z
    A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory…
    cvelistv5