CVE-2015-7362: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc setuid program.

Affected products

• Fortinet FortiClient: any version

Published 2016-01-08. Last modified 2026-06-17.