CVE-2019-15704

5.5MEDIUM

Key Information:

Vendor
Fortinet
Vendor
CVE Published:
21 November 2019

Summary

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway.

Affected Version(s)

FortiClient for Mac OS FortiClient for Mac OS 6.2.0

FortiClient for Mac OS 6.0.7

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.