Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
pcdslka
New Contributor

False positive critical vulnerability for postgres reported

I installed latest postgres 11.7 (postgresql-11.7-2-windows-x64).

FortiClient (6.0.8.0261) "Vulnerability Scan" reports critical CVE-2018-16850. This vulnerability belongs to versions before 11.1 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16850)

 

File version of psql.exe is "11.0.7.20080" but product version is "11.7". Looks like FortiClient checks file version instead product version.

 

Regards

Maki

 

 

0 REPLIES 0
Labels
Top Kudoed Authors