CVE-2017-14184: An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and…

PriorityP348high8.8CVSS 3.0

AVNACLPRLUINSUCHIHAH

EPSS

2.08%

79.3th percentile

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
fortinet	forticlient	< 5.6.0	5.6.0
fortinet	forticlient	—	—
fortinet	forticlient_sslvpn_client	< 4.4.2334	4.4.2334
fortinet	forticlientsslvpnclient	—	—
fortinet	fortinet	—	—
fortinet_inc	forticlient_for_mac_osx	—	—
fortinet_inc	forticlient_for_windows	—	—
fortinet_inc	forticlient_sslvpn_client_for_linux	—	—

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.