CVE-2017-14184
An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - psirt@fortinet.com
- Published
- 2017-12-15
- Last modified
- 2024-10-25
- Weaknesses
- CWE-200
Affected products
- Forticlient (Fortinet)
- Forticlient Sslvpn Client (Fortinet)
- Forticlient For Mac Osx (Fortinet Inc.)
- Forticlient For Windows (Fortinet Inc.)
- Forticlient Sslvpn Client For Linux (Fortinet Inc.)
References
- http://www.securityfocus.com/bid/102123
- https://fortiguard.com/advisory/FG-IR-17-214
