PT-2017-13293 · Fortinet · Forticlient For Mac Osx+2

Published 2017-12-15 · Updated 2020-05-11 · CVE-2017-14184

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 5.6.0 and below FortiClient for Mac OSX versions 5.6.0 and below FortiClient SSLVPN Client for Linux versions 4.4.2334 and below

Description An Information Disclosure issue allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Recommendations For FortiClient for Windows versions 5.6.0 and below, update to a version above 5.6.0 to resolve the issue. For FortiClient for Mac OSX versions 5.6.0 and below, update to a version above 5.6.0 to resolve the issue. For FortiClient SSLVPN Client for Linux versions 4.4.2334 and below, update to a version above 4.4.2334 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-14184

Affected Products

Forticlient Sslvpn Client For Linux

Forticlient For Mac Osx

Forticlientwindows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-14184 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14184 · Vendor Advisory
• https://fortiguard.com/advisory/FG-IR-17-214 · Vendor Advisory
• http://securityfocus.com/bid/102123 · Note