PT-2023-5166 · Fortinet · Forticlientems

Published 2023-08-30 · Updated 2023-09-15 · CVE-2021-44172

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions FortiClientEMS versions 7.0.0 through 7.0.4 FortiClientEMS versions 7.0.6 through 7.0.7 FortiClientEMS versions 6.4 and earlier FortiClientEMS versions 6.2 and earlier

Description The issue is related to an exposure of sensitive information to an unauthorized actor, which may allow an unauthenticated attacker to gain information on environment variables, such as the EMS installation path. This is due to insufficient protection of service data. The vulnerability can be exploited by a remote attacker to gain unauthorized access to protected information.

Recommendations For FortiClientEMS versions 7.0.0 through 7.0.4, update to a version outside of this range to mitigate the risk. For FortiClientEMS versions 7.0.6 through 7.0.7, update to a version outside of this range to mitigate the risk. For FortiClientEMS versions 6.4 and earlier, update to a version later than 6.4 to mitigate the risk. For FortiClientEMS versions 6.2 and earlier, update to a version later than 6.2 to mitigate the risk. As a temporary workaround, consider restricting access to the management interface to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2023-05758

CVE-2021-44172

Affected Products

Forticlientems

References · 7

• https://fortiguard.com/psirt/FG-IR-21-244 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44172 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44172 · Security Note
• https://bdu.fstec.ru/vul/2023-05758 · Security Note
• https://vuldb.com/ru/?id.239661 · Note
• https://twitter.com/CVEnew/status/1701942514150760612 · Twitter Post
• https://t.me/cibsecurity/70383 · Telegram Post