2 lines
7.7 KiB
JSON
2 lines
7.7 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:fortinet:forticlientwindows:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"FortiClientWindows","vendor":"Fortinet","versions":[{"lessThanOrEqual":"6.0.5","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThanOrEqual":"5.6.6","status":"affected","version":"5.6.0","versionType":"semver"},{"lessThanOrEqual":"5.4.5","status":"affected","version":"5.4.0","versionType":"semver"},{"lessThanOrEqual":"5.2.6","status":"affected","version":"5.2.0","versionType":"semver"},{"lessThanOrEqual":"5.0.11","status":"affected","version":"5.0.0","versionType":"semver"},{"lessThanOrEqual":"4.3.5","status":"affected","version":"4.3.0","versionType":"semver"},{"lessThanOrEqual":"4.2.7","status":"affected","version":"4.2.0","versionType":"semver"},{"lessThanOrEqual":"4.1.3","status":"affected","version":"4.1.0","versionType":"semver"},{"lessThanOrEqual":"4.0.4","status":"affected","version":"4.0.1","versionType":"semver"},{"lessThan":"5.6.*","status":"affected","version":"5.6.0","versionType":"semver"}]}],"source":"psirt@fortinet.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","matchCriteriaId":"92AD53B0-B537-4A53-B8FC-2D7CC7EA8D9A","versionEndExcluding":"6.0.6","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable"},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda insegura en el instalador en línea de FortiClient (versión de Windows anterior a 6.0.6) puede permitir que un atacante remoto no identificado con control sobre el directorio en el que FortiClientOnlineInstaller.exe reside, ejecute código arbitrario en el sistema mediante la carga de archivos .dll maliciosos en este directorio."}],"id":"CVE-2019-5589","lastModified":"2026-10-13T18:17:09.533","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"psirt@fortinet.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2019-5589","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-10-24T20:03:55.925107Z","version":"2.0.3"}}]},"published":"2019-05-28T22:29:00.670","references":[{"source":"psirt@fortinet.com","url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-060"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://fortiguard.com/advisory/FG-IR-19-060"}],"sourceIdentifier":"psirt@fortinet.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-426"}],"source":"psirt@fortinet.com","type":"Primary"},{"description":[{"lang":"en","value":"CWE-426"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|