1038 matches found
CVE-2019-15704: Missing Encryption of Sensitive Data
A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...
PT-2019-6278
Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.0.6 and below FortiOS versions 6.0.7 and below FortiClient for Mac OS versions 6.2.1 and below Description The issue is related to the use of a hardcoded cryptographic key in the FortiGuard services...
PT-2019-14335
Name of the Vulnerable Software and Affected Versions FortiClient for Mac affected versions not specified Description A clear text storage of sensitive information issue may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN...
Fortinet FortiClient Denial of Service Vulnerability
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...
Fortinet FortiClient Denial of Service Vulnerability (CNVD-2019-41687)
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...
Fortinet FortiClient Elevation of Privilege Vulnerability (CNVD-2019-41688)
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...
Fortinet FortiClient Command Injection Vulnerability (CNVD-2019-42446)
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A command injection vulnerability exists in Fortinet...
Fortinet FortiClient for Linux Multiple Local Security Vulnerabilities
Description Fortinet FortiClient for Linux is prone to multiple local security vulnerabilities. An attacker may exploit these issues to inject and execute arbitrary system-commands with root privileges, overwrite system-files, gain elevated privileges or cause denial of service conditions. Versio...
Fortinet FortiClient Information Disclosure Vulnerability
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. An information disclosure vulnerability exists in Fortin...
Console window of FortiClient for Mac OS displays password in clear-text.
A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...
Fortinet FortiClient for macOS CVE-2019-15704 Local Information Disclosure Vulnerability
Description Fortinet FortiClient for macOS is prone to a local information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. Versions prior to FortiClient for macOS 6.0.8 and 6.2.1 are vulnerable. Technologies...
PT-2019-6275
Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description The issue is related to the Export logs function in FortiClient for Linux, which is associated with incorrect restriction of the directory path name with limited access. Exploitation o...
PT-2019-6273
Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below FortiClient for Linux versions 6.2.2 and below Description The issue is related to a privilege escalation vulnerability in the implementation of the backup configuration script. It is caused by...
PT-2019-6274
Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description The issue is related to insufficient input validation in the nanomsg library of FortiClient for Linux, which can be exploited by a remote attacker to cause a denial of service by sendi...
Fortinet FortiClient Command Injection Vulnerability
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A command injection vulnerability exists in a root proce...
PT-2019-6277
Name of the Vulnerable Software and Affected Versions FortiClient for Mac OS affected versions not specified Description The issue is related to an improper neutralization of special elements used in a command, which may allow a local user to execute unauthorized code as root by bypassing a...
Command injection vulnerability in FortiClient for Mac OS
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check...
Fortinet FortiClient for macOS CVE-2019-17650 Local Command Injection Vulnerability
Description Fortinet FortiClient for macOS is prone to a local command-injection vulnerability. An attacker may exploit this issue to inject and execute arbitrary commands with root privileges. Versions prior to FortiClient for macOS 6.2.2 are vulnerable. Technologies Affected Fortinet FortiClien...
