CVE-2021-43205
06.04.2022, 10:15
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | forticlient | 6.2.0 ≤ 𝑥 ≤ 6.2.4 |
| fortinet | forticlient | 6.2.6 ≤ 𝑥 ≤ 6.2.9 |
| fortinet | forticlient | 6.4.0 ≤ 𝑥 ≤ 6.4.4 |
| fortinet | forticlient | 7.0.0 ≤ 𝑥 ≤ 7.0.2 |
| fortinet | forticlient | 6.4.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration