VYPR
← All advisories
Low severity3.3NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-37939

CVE-2023-37939

Description

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.

Affected products

11
  • Fortinet/Forticlient11 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*+ 10 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*range: >=6.2.0,<=6.2.9
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*range: >=6.2.0,<=6.2.9
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*range: >=6.2.0,<=6.2.9
    • cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*
    • cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:macos:*:*
    • cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:macos:*:*
    • (no CPE)range: Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions; Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions; Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions
    • (no CPE)range: 7.2.0
    • (no CPE)range: 7.2.0
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.