CVE-2021-36189

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

Score

CVSS 3.1 6.8 Medium

Status

Modified - psirt@fortinet.com

Published

2021-12-09

Last modified

2024-10-25

Weaknesses

CWE-311

Affected products

• Forticlient Enterprise Management Server (Fortinet)
• Fortinet Forticlientems (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-140