CVE-2020-15934: 
FortiClient vulnerability analysis and mitigation

An execution with unnecessary privileges vulnerability was discovered in the VCM engine of FortiClient for Linux. The vulnerability affects FortiClient for Linux versions 6.2.7 and below, as well as version 6.4.0. This security issue was assigned CVE-2020-15934 and was disclosed on October 19, 2020 (Fortinet Advisory).

The vulnerability exists in the VCM engine of FortiClient for Linux and allows local users to elevate their privileges to root by creating a malicious script or program on the target machine. The vulnerability received a CVSS v3.1 base score of 7.8 HIGH (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) according to NVD's assessment, while Fortinet assigned it a CVSS score of 8.8 HIGH (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) (NVD).

The successful exploitation of this vulnerability allows local attackers to elevate their privileges to root level, potentially gaining complete control over the affected system. This could lead to unauthorized access to sensitive system resources and full system compromise (Fortinet Advisory).

Fortinet has released patches to address this vulnerability. Users are advised to upgrade to FortiClient for Linux version 6.2.8 or above, or FortiClient for Linux version 6.4.1 or above (Fortinet Advisory).

The vulnerability was responsibly disclosed by security researcher Marco Vaz, who was acknowledged by Fortinet for reporting this security issue (Fortinet Advisory).