Skip to content
OpenAdvisories
Medium · 6.8 CVE-2021-36189 EUVD-2021-22810GHSA-v99f-7jp8-w888

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to infor…

Published Dec 9, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiClientEMS Category: Network devices

Description

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiClientEMS FortiClientEMS 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0 —

References