CVE-2017-14184

N/A

Description

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

CVE Details

CVSS v3.1 ScoreN/A

Published12/15/2017

Last Modified4/20/2025

Sourcenvd

Honeypot Sightings0

Affected Products

fortinet:forticlientfortinet:forticlient_sslvpn_client

Weaknesses (CWE)

CWE-200

References

http://www.securityfocus.com/bid/102123(psirt@fortinet.com)

https://fortiguard.com/advisory/FG-IR-17-214(psirt@fortinet.com)

http://www.securityfocus.com/bid/102123(af854a3a-2127-422b-91ae-364da2661108)

https://fortiguard.com/advisory/FG-IR-17-214(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.