Fortinet FortiDLP Agent Outlookproxy Plugin Path Traversal Vulnerability Allowing Privilege Escalation

A path traversal vulnerability has been identified in the Fortinet FortiDLP Agent's Outlookproxy plugin, specifically in versions of MacOS 11.5.1, 11.4.2 through 11.4.6, 11.3.2 through 11.3.4, 11.2.0 through 11.2.3, 11.1.1 through 11.1.2, 11.0.1, 10.5.1, 10.4.0, and 10.3.1. This vulnerability allows an authenticated attacker to escalate privileges to Root by sending a crafted request to a local listening port.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain Root access on the affected system.

Remediation

Users are advised to migrate to a fixed release of Fortinet FortiDLP Agent. Specific instructions for the migration process can be found in the Fortinet FortiDLP documentation.