Vulnerability Details CVE-2019-5589
An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files in that directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
References
Products affected by CVE-2019-5589
-
cpe:2.3:a:fortinet:forticlient:4.0.1
-
cpe:2.3:a:fortinet:forticlient:4.0.2
-
cpe:2.3:a:fortinet:forticlient:4.0.3
-
cpe:2.3:a:fortinet:forticlient:4.0.4
-
cpe:2.3:a:fortinet:forticlient:4.1.0
-
cpe:2.3:a:fortinet:forticlient:4.1.1
-
cpe:2.3:a:fortinet:forticlient:4.1.2
-
cpe:2.3:a:fortinet:forticlient:4.1.3
-
cpe:2.3:a:fortinet:forticlient:4.2.0
-
cpe:2.3:a:fortinet:forticlient:4.2.1
-
cpe:2.3:a:fortinet:forticlient:4.2.2
-
cpe:2.3:a:fortinet:forticlient:4.2.3
-
cpe:2.3:a:fortinet:forticlient:4.2.4
-
cpe:2.3:a:fortinet:forticlient:4.2.5
-
cpe:2.3:a:fortinet:forticlient:4.2.6
-
cpe:2.3:a:fortinet:forticlient:4.2.7
-
cpe:2.3:a:fortinet:forticlient:4.3.0
-
cpe:2.3:a:fortinet:forticlient:4.3.1
-
cpe:2.3:a:fortinet:forticlient:4.3.2
-
cpe:2.3:a:fortinet:forticlient:4.3.3
-
cpe:2.3:a:fortinet:forticlient:4.3.4
-
cpe:2.3:a:fortinet:forticlient:4.3.5
-
cpe:2.3:a:fortinet:forticlient:5.0.10
-
cpe:2.3:a:fortinet:forticlient:5.0.11
-
cpe:2.3:a:fortinet:forticlient:5.0.5
-
cpe:2.3:a:fortinet:forticlient:5.0.6
-
cpe:2.3:a:fortinet:forticlient:5.0.7
-
cpe:2.3:a:fortinet:forticlient:5.0.8
-
cpe:2.3:a:fortinet:forticlient:5.0.9
-
cpe:2.3:a:fortinet:forticlient:5.2.0
-
cpe:2.3:a:fortinet:forticlient:5.2.1
-
cpe:2.3:a:fortinet:forticlient:5.2.2
-
cpe:2.3:a:fortinet:forticlient:5.2.3
-
cpe:2.3:a:fortinet:forticlient:5.2.4
-
cpe:2.3:a:fortinet:forticlient:5.2.5
-
cpe:2.3:a:fortinet:forticlient:5.2.6
-
cpe:2.3:a:fortinet:forticlient:5.4.0
-
cpe:2.3:a:fortinet:forticlient:5.4.1
-
cpe:2.3:a:fortinet:forticlient:5.4.2
-
cpe:2.3:a:fortinet:forticlient:5.4.3
-
cpe:2.3:a:fortinet:forticlient:5.4.4
-
cpe:2.3:a:fortinet:forticlient:5.4.5
-
cpe:2.3:a:fortinet:forticlient:5.6.0
-
cpe:2.3:a:fortinet:forticlient:5.6.1
-
cpe:2.3:a:fortinet:forticlient:5.6.2
-
cpe:2.3:a:fortinet:forticlient:5.6.3
-
cpe:2.3:a:fortinet:forticlient:5.6.4
-
cpe:2.3:a:fortinet:forticlient:5.6.5
-
cpe:2.3:a:fortinet:forticlient:5.6.6
-
cpe:2.3:a:fortinet:forticlient:6.0.0
-
cpe:2.3:a:fortinet:forticlient:6.0.1
-
cpe:2.3:a:fortinet:forticlient:6.0.2
-
cpe:2.3:a:fortinet:forticlient:6.0.3
-
cpe:2.3:a:fortinet:forticlient:6.0.4
-
cpe:2.3:a:fortinet:forticlient:6.0.5