CVE-2021-43204

Published: Dec 9, 2021Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.

Affected (36)

Products: Fortinet: Forticlient

Fortinet

1 product

Forticlient

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Fortinet Forticlient	From 5.0.0 to 5.0.11
Fortinet Forticlient	From 5.4.0 to 5.4.5
Fortinet Forticlient	From 5.6.0 to 5.6.6
Fortinet Forticlient	From 6.0.0 to 6.0.10
Fortinet Forticlient	From 6.2.0 to 6.2.9
Fortinet Forticlient	Version 4.0.1
Fortinet Forticlient	Version 4.0.2
Fortinet Forticlient	Version 4.0.3
Fortinet Forticlient	Version 4.0.4
Fortinet Forticlient	Version 4.1.0
Fortinet Forticlient	Version 4.1.1
Fortinet Forticlient	Version 4.1.2
Fortinet Forticlient	Version 4.1.3
Fortinet Forticlient	Version 4.2.0
Fortinet Forticlient	Version 4.2.1
Fortinet Forticlient	Version 4.2.2
Fortinet Forticlient	Version 4.2.3
Fortinet Forticlient	Version 4.2.4
Fortinet Forticlient	Version 4.2.5
Fortinet Forticlient	Version 4.2.6
Fortinet Forticlient	Version 4.2.7
Fortinet Forticlient	Version 4.3.0
Fortinet Forticlient	Version 4.3.1
Fortinet Forticlient	Version 4.3.2
Fortinet Forticlient	Version 4.3.3
Fortinet Forticlient	Version 4.3.4
Fortinet Forticlient	Version 4.3.5
Fortinet Forticlient	Version 5.2.0
Fortinet Forticlient	Version 5.2.1
Fortinet Forticlient	Version 5.2.2
Fortinet Forticlient	Version 5.2.3
Fortinet Forticlient	Version 5.2.4
Fortinet Forticlient	Version 5.2.5
Fortinet Forticlient	Version 5.2.6
Fortinet Forticlient	Version 6.4.0
Fortinet Forticlient	Version 6.4.1

References (2)

https://fortiguard.com/advisory/FG-IR-21-167

Source: psirt@fortinet.com

PatchVendor Advisory

https://fortiguard.com/advisory/FG-IR-21-167

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.