CVE-2022-33878

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal...

The vulnerability of the FortiClient for MAC installer allows a perpetrator to execute arbitrary commands.

The vulnerability of the FortiClient for MAC installer is related to improper external management of the file name or path to the /tmp directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2022-33878

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal...

CVE-2022-33878: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal...

CVE-2021-26089: Improper Link Resolution Before File Access

An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase...

PT-2021-3592

Name of the Vulnerable Software and Affected Versions FortiClient for Mac versions 6.4.3 and below Description The issue is related to an improper symlink following in FortiClient for Mac, which may allow a non-privileged user to execute arbitrary privileged shell commands during the installation...

PT-2019-14335

Name of the Vulnerable Software and Affected Versions FortiClient for Mac affected versions not specified Description A clear text storage of sensitive information issue may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN...

CVE-2019-15704: Missing Encryption of Sensitive Data

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

PT-2019-6277

Name of the Vulnerable Software and Affected Versions FortiClient for Mac OS affected versions not specified Description The issue is related to an improper neutralization of special elements used in a command, which may allow a local user to execute unauthorized code as root by bypassing a...

The vulnerability of the FortiClient for MAC protection mechanism, which stems from deficiencies in access control, allows attackers to trigger a service failure.

The vulnerability of the FortiClient for MAC protection tool is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a service failure using specially created files...

CVE-2017-17543: Inadequate Encryption Strength

Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak...

CVE-2017-14184: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to...

PT-2017-13293

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 5.6.0 and below FortiClient for Mac OSX versions 5.6.0 and below FortiClient SSLVPN Client for Linux versions 4.4.2334 and below Description An Information Disclosure issue allows regular users to see each...