Hardcoded Encryption Key Used for VPN Saved Passwords

A Missing Authorization CWE-862 in FortiClient Windows may allow an authenticated local attacker to decrypt a currently logged in users VPN password via use of an unprotected DLL function...