- Added submission from Fortinet for FG-IR-17-070 from 2017-12-14.

This commit is contained in:
CVE Team 2017-12-14 12:09:47 -05:00
parent 168c6abf5e
commit c7cb267390
No known key found for this signature in database
GPG Key ID: 3504EC0FB4B2FE56

View File

@ -1,8 +1,32 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ASSIGNER" : "psirt@fortinet.com",
"DATE_PUBLIC" : "2017-12-12T00:00:00",
"ID" : "CVE-2017-7344",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "FortiClientWindows",
"version" : {
"version_data" : [
{
"version_value" : "5.6.0, 5.4.3, 5.4.2, 5.4.1, 5.4.0"
}
]
}
}
]
},
"vendor_name" : "Fortinet, Inc."
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +35,26 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "A privilege escalation in Fortinet FortiClient Windows allows attacker to gain privilege via exploiting the Windows \"security alert\" dialog thereby popping up when the VPN before logon feature is enabled and an untrusted certificate chain"
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Escalation of privilege"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "https://fortiguard.com/advisory/FG-IR-17-070"
}
]
}