Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-44172

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path.

Published

2023-09-13T13:15:07.537

Last Modified

2024-11-21T06:30:30.080

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet forticlient_endpoint_management_server ≤ 6.2.9 Yes
Application fortinet forticlient_endpoint_management_server ≤ 6.4.9 Yes
Application fortinet forticlient_endpoint_management_server ≤ 7.0.4 Yes
Application fortinet forticlient_endpoint_management_server ≤ 7.0.7 Yes
References