Description
Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_shell_access and executing the "shell" command.
References (4)
Core 4
Core References
Exploit x_refsource_misc
http://packetstormsecurity.com/files/130156/Fortinet-FortiAuthenticator-XSS-Disclosure-Bypass.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100559
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72378
Scores
EPSS
0.0006
EPSS Percentile
19.3%
Details
CWE
CWE-264
Status
published
Products (1)
fortinet/fortiauthenticator
3.0.0
Published
Feb 03, 2015
Tracked Since
Feb 18, 2026