Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2019.4008 Command injection vulnerability in FortiClient for Mac OS 30 October 2019 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Fortiguard FortiClient Publisher: Fortinet Operating System: OS X Impact/Access: Root Compromise -- Existing Account Resolution: Patch/Upgrade CVE Names: CVE-2019-17650 Original Bulletin: https://fortiguard.com/psirt/FG-IR-19-210 - --------------------------BEGIN INCLUDED TEXT-------------------- Command injection vulnerability in FortiClient for Mac OS IR Number : FG-IR-19-210 Date : Oct 29, 2019 Risk : 3/5 Impact : Unauthorized code execution CVE ID : CVE-2019-17650 CVE ID : CVE-2019-17650 Summary An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check. Impact Unauthorized code execution Affected Products FortiClient for Mac OS version 6.2.1 and below. Solutions Please upgrade to FortiClient for Mac OS version 6.2.2 and above. Acknowledgement Fortinet is very pleased to thank Lasse Trolle Borup of Langkjaer Cyber Defence for bringing this issue to our attention under responsible disclosure. - --------------------------END INCLUDED TEXT-------------------- You have received this e-mail bulletin as a result of your organisation's registration with AusCERT. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager. If you do not know who that is, please send an email to auscert@auscert.org.au and we will forward your request to the appropriate person. NOTE: Third Party Rights This security bulletin is provided as a service to AusCERT's members. As AusCERT did not write the document quoted above, AusCERT has had no control over its content. The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation's site policies and procedures. AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. NOTE: This is only the original release of the security bulletin. It may not be updated when updates to the original are made. If downloading at a later date, it is recommended that the bulletin is retrieved directly from the author's website to ensure that the information is still current. Contact information for the authors of the original document is included in the Security Bulletin above. If you have any questions or need further information, please contact them directly. Previous advisories and external security bulletins can be retrieved from: https://www.auscert.org.au/bulletins/ =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert@auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. =========================================================================== -----BEGIN PGP SIGNATURE----- Comment: http://www.auscert.org.au/render.html?it=1967 iQIVAwUBXbjeg2aOgq3Tt24GAQiMKhAAtYOnvJZKfl5k2TpeGfD3k/Eo2nPRfo3S fbmY6zfaXca/NHMnN2Ke5QxqqO6gU8yi61CJQfnH0BuZ92j+dtu8SUw8l7mSuKuX GkZPiau2c0O+qu4UUFNU9vR1CRJa+y1jk3Nn6wpalVI/uSmi83U7IlTMQEpO8C0o sMR+iDFit+6BqbgWxp1UFOy0eST4vTt38Jl6ZYKODuOv5mYu3jsXRk9f8BXxwIMG uJmSTHMnSjYUZcqjOKXR2a43tSeKiAte0DUeIgNHgxpNaL76CSu162vxgZF0W4C7 G6VajD3D6UGmJw69RI/bORnySj+vbXmqVm52SKpor7JTpoc6zR0UhgS4RsteODJe eAuRk3vhHS/w7o1lu+kX19jgDpv79EZSLtzNAPPbnnbRfBRlx3RzLQ1qcYP2URL8 wGWsJAJ21rF6RL0sYdiEVGHSY5B0ppPsGCaj/XyVR7cPyXSCdJzfrWeCAizUIzj0 SxVwpQ5mqRPzY41zU54+/ZpmVQbDQeJ9GpqvRo4neKHFOUzYXRzkXFxY8/7KwOkJ TYK9sQQ5LTdqr8HvE3nDaVJIUYra9LKwBPERCL0dyB6dwmrhX83FNr0AOn2W6YIY 5r2xJTb7eAHZAYpFLqZEjGvGI4vIB/U8iINAFgYhkIKAdSaUqn1DWTCZqHVm95w1 Bmhs34T38Xg= =1ipd -----END PGP SIGNATURE-----