VYPR
← All advisories
Medium severity6.8NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2021-44167

CVE-2021-44167

Description

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

Affected products

3
  • Fortinet/Forticlient3 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*+ 2 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*range: >=6.0.0,<=6.0.8
    • (no CPE)range: <=6.0.8, <=6.2.9, <=6.4.7, <=7.0.2
    • (no CPE)range: FortiClientLinux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.