Medium severity5.4NVD Advisory· Published Oct 6, 2021· Updated Jun 17, 2026
CVE-2020-15941
CVE-2020-15941
Description
A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.
Affected products
3- cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*Range: <6.2.9
<=6.4.1, <=6.2.8+ 1 more
- (no CPE)range: <=6.4.1, <=6.2.8
- (no CPE)range: FortiClientEMS 6.4.1, 6.4.0, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0
Patches
Vulnerability mechanics
References
1- fortiguard.com/advisory/FG-IR-20-074nvdVendor Advisory
News mentions
0No linked articles in our index yet.