VYPR
← All advisories
Unrated severityNVD Advisory· Published May 11, 2022· Updated Oct 22, 2024

CVE-2021-44167

CVE-2021-44167

Description

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

Affected products

2
  • Fortinet/Forticlientllm-fuzzy2 versions
    <=6.0.8, <=6.2.9, <=6.4.7, <=7.0.2+ 1 more
    • (no CPE)range: <=6.0.8, <=6.2.9, <=6.4.7, <=7.0.2
    • (no CPE)range: FortiClientLinux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.