high7.8
CVE-2021-32592
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allo…
Impact
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlient | from 6.0.0 through 6.0.9 from 6.2.0 through 6.2.9 from 6.4.0 before 6.4.7 Version 7.0.0 |
| Fortinet | Forticlient Enterprise Management Server | from 6.0.0 through 6.0.6 from 6.2.0 through 6.2.9 from 6.4.0 before 6.4.7 Version 7.0.0 |