Fortinet FortiDLP Agent Outlookproxy Path Traversal Vulnerability Allowing Privilege Escalation

A path traversal vulnerability has been identified in the Fortinet FortiDLP Agent's Outlookproxy plugin, affecting versions 11.5.1, 11.4.2 through 11.4.6, 11.3.2 through 11.3.4, 11.2.0 through 11.2.3, 11.1.1 through 11.1.2, 11.0.1, 10.5.1, 10.4.0, and 10.3.1. This vulnerability allows an authenticated attacker to escalate privileges to LocalService on Windows or Root on MacOS by sending a crafted request to a local listening port.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation to LocalService on Windows or Root on MacOS.

Remediation

Users are advised to migrate to a fixed release of Fortinet FortiDLP Agent. Instructions for downloading the latest version can be found on the Fortinet FortiDLP product page.