VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026

CVE-2021-36189

CVE-2021-36189

Description

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

Affected products

6
  • Fortinet/Forticlient Enterprise Management Server4 versions
    cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*range: >=6.4.0,<=6.4.4
    • cpe:2.3:a:fortinet:forticlient_enterprise_management_server:6.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.1:*:*:*:*:*:*:*
  • Fortinet/Forticlientemsllm-fuzzy2 versions
    <=7.0.1, <=6.4.4+ 1 more
    • (no CPE)range: <=7.0.1, <=6.4.4
    • (no CPE)range: FortiClientEMS 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.