CVE-2017-14184 — Fortinet, Inc. / FortiClient for Windows

Description (CNA)

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Affected (CNA)

Vendor / product	Versions
Fortinet, Inc. / FortiClient for Windows	affected 5.6.0 and below
Fortinet, Inc. / FortiClient for Mac OSX	affected 5.6.0 and below
Fortinet, Inc. / FortiClient SSLVPN Client for Linux	affected 4.4.2334 and below

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-17-214
http://www.securityfocus.com/bid/102123

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-17-214
http://www.securityfocus.com/bid/102123

CISA-ADP

No English description supplied.

No references supplied.