CVE-2017-14184

Опубликовано: 15 дек. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 4

EPSS Низкий

Описание

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Ссылки

http://www.securityfocus.com/bid/102123
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-17-214
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/102123
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-17-214
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*

Версия до 5.6.0 (исключая)

Конфигурация 2

cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*

Версия до 5.6.0 (исключая)

Конфигурация 3

cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*

Версия до 4.4.2334 (исключая)

EPSS

Процентиль: 82%

0.01649

Низкий

8.8 High

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-6gmg-c6p4-v53m