Skip to content
OpenAdvisories
Medium · 6.8 CVE-2021-44167 EUVD-2021-31017GHSA-9mc4-h6fw-r59x

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 an…

Published May 11, 2022 · Updated Oct 22, 2024 · Assigned by fortinet

Description

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiClientLinux FortiClientLinux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below —

References