VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 15, 2017· Updated Jun 17, 2026

CVE-2017-14184

CVE-2017-14184

Description

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Affected products

8
  • Fortinet/Forticlient3 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*+ 2 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*range: <5.6.0
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*range: <5.6.0
    • (no CPE)range: <=5.6.0
  • Fortinet/Forticlient Sslvpn Client2 versions
    cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*range: <4.4.2334
    • (no CPE)range: <=4.4.2334
  • Fortinet, Inc./FortiClient for Mac OSXv5
    Range: 5.6.0 and below
  • Fortinet, Inc./FortiClient for Windowsv5
    Range: 5.6.0 and below
  • Fortinet, Inc./FortiClient SSLVPN Client for Linuxv5
    Range: 4.4.2334 and below

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.