CVE-2019-16155: fortinet forticlient
Vulnerability summary
CVE-2019-16155 is a high (CVSS 7.1) vulnerability in fortinet forticlient. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 37.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-02-2020PublishedVulnerability first disclosed.
- 25-10-2024Last modifiedVulnerability information updated.
Description
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more, FortiClient for Linux 6.2.2 and below allow low privilege user write the system backup file under root privilege through GUI thus can cause root system file overwrite.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.44%
Chance of exploitation in the next 30 days
Percentile
37%
Versus all other CVEs
30-day change
0.00 pp
From 0.44% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (danishcyberdefence.dk)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Fortinet2 products
- forticlient≤ 6.2.1
- fortinet forticlientlinuxFortiClientLinux 6.2.1 and below
1 vendor · 2 products