CVE-2021-44172

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the E...

CVE-2021-44172

Fortinet FortiClientEMS exposes environment-variable information to unauthenticated users in several versions: FortiClientEMS 7.0.0–7.0.4, 7.0.6–7.0.7, plus all 6.4 and 6.2 branches. The underlying issue is an information-disclosure vulnerability that can reveal EMS installation path and related ...