cbcvebase.
CVE-2021-36189
published 2021-12-09

CVE-2021-36189: A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure…

medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

Affected

8 ranges
VendorProductVersion rangeFixed in
fortinetforticlient_enterprise_management_server
fortinetforticlient_enterprise_management_server
fortinetforticlient_enterprise_management_server
fortinetforticlient_enterprise_management_server6.4.0 – 6.4.4
fortinetforticlientems
fortinetforticliententerprisemanagementserver
fortinetfortinet
fortinetfortinet_forticlientems