Medium severity4.3NVD Advisory· Published Sep 13, 2023· Updated Jun 17, 2026
CVE-2021-44172
CVE-2021-44172
Description
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path.
Affected products
3- cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*Range: >=6.2.0,<=6.2.9
7.0.0-7.0.4, 7.0.6-7.0.7, 6.4.x, 6.2.x+ 1 more
- (no CPE)range: 7.0.0-7.0.4, 7.0.6-7.0.7, 6.4.x, 6.2.x
- (no CPE)range: 7.0.6
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-21-244nvdVendor Advisory
News mentions
0No linked articles in our index yet.