Information Exposure Vulnerability in FortiClient for Linux by Fortinet
CVE-2021-43205

4.3MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortinet Forticlientlinux
Vendor
CVE Published:
6 April 2022

Summary

FortiClient for Linux has a vulnerability that can expose sensitive information to unauthorized users. Specifically, versions 7.0.2 and earlier, as well as 6.4.7 and 6.2.9 are affected. An unauthenticated attacker can potentially access the confighandler webserver via external binaries, posing a risk of sensitive data being compromised. Organizations using these versions should consider updating to mitigate this risk.

Affected Version(s)

Fortinet FortiClientLinux FortiClientLinux 7.0.2 and below, 6.4.7 and below, 6.2.9 and below

References

https://fortiguard.com/psirt/FG-IR-21-226
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.