CVE-2024-50570

CWE-312 — Cleartext Storage of Sensitive Info4 documents4 sources
Severity
5.0MEDIUM
EPSS
0.0%
top 95.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Fortinet ForticlientFortinet ForticlientlinuxFortinet Forticlientmac+1 more
Timeline
PublishedDec 18

Description

A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2.0 through 7.2.7, 7.0.0 through 7.0.13 may permit a local authenticated user to retrieve VPN password via memory dump, due to JavaScript's garbage collector

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:NExploitability: 0.6 | Impact: 4.0

Affected Packages4 packages

▶CVEListV5fortinet/forticlientlinux7.4.0 — 7.4.2+2
▶CVEListV5fortinet/forticlientwindows7.2.0 — 7.2.5+2
▶NVDfortinet/forticlient7.0.0 — 7.0.14+4
▶CVEListV5fortinet/forticlientmac7.4.0 — 7.4.2+2

🔴Vulnerability Details

2
CVEList
CVE-2024-50570: A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7↗2024-12-18
▶
VulnCheck
Fortinet forticlient Cleartext Storage of Sensitive Information↗2024
▶

📋Vendor Advisories

1
Fortinet
A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 th...↗2024-12-18
▶
CVE-2024-50570 (MEDIUM CVSS 5) | A Cleartext Storage of Sensitive In | cvebase.io