medium4.3
CVE-2021-43205
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2…
Impact
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlient | from 6.2.0 through 6.2.4 from 6.2.6 through 6.2.9 from 6.4.0 through 6.4.4 from 7.0.0 through 7.0.2 Version 6.4.7 |