← Back

CVE-2023-37939

nvd nist
Published: Oct 10, 2023Modified: Nov 21, 2024

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.

Affected (13)

1 product
Forticlient
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
From 6.2.0 to 6.2.9
From 6.4.0 to 6.4.9
From 7.0.0 to 7.0.9
From 6.2.0 to 6.2.9
From 6.4.0 to 6.4.10
From 7.0.0 to 7.0.9
From 6.2.0 to 6.2.9
From 6.4.0 to 6.4.10
From 7.0.0 to 7.0.9
Version 7.2.0
Version 7.2.0
Version 7.2.0
Version 7.2.1

References (2)

Source: psirt@fortinet.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.