CVE-2021-43204

A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.

Published: Dec 9, 2021
Updated: Apr 14, 2023
CVE: CVE-2021-43204
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.4
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.9
AV:L/AC:L/Au:N/C:N/I:N/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
fortinet / forticlient	6.2.0	6.2.9.x
fortinet / forticlient	4.2.7	4.2.7.x
fortinet / forticlient	4.2.6	4.2.6.x
fortinet / forticlient	4.2.5	4.2.5.x
fortinet / forticlient	4.2.4	4.2.4.x
fortinet / forticlient	4.2.3	4.2.3.x
fortinet / forticlient	4.2.2	4.2.2.x
fortinet / forticlient	4.2.1	4.2.1.x
fortinet / forticlient	4.2.0	4.2.0.x
fortinet / forticlient	4.1.3	4.1.3.x
fortinet / forticlient	4.1.2	4.1.2.x
fortinet / forticlient	4.1.1	4.1.1.x
fortinet / forticlient	4.1.0	4.1.0.x
fortinet / forticlient	4.0.4	4.0.4.x
fortinet / forticlient	4.0.3	4.0.3.x
fortinet / forticlient	4.0.2	4.0.2.x
fortinet / forticlient	4.0.1	4.0.1.x
fortinet / forticlient	4.3.5	4.3.5.x
fortinet / forticlient	4.3.4	4.3.4.x
fortinet / forticlient	4.3.3	4.3.3.x
fortinet / forticlient	4.3.2	4.3.2.x
fortinet / forticlient	4.3.1	4.3.1.x
fortinet / forticlient	5.2.6	5.2.6.x
fortinet / forticlient	5.2.5	5.2.5.x
fortinet / forticlient	5.2.4	5.2.4.x
fortinet / forticlient	5.2.3	5.2.3.x
fortinet / forticlient	5.2.2	5.2.2.x
fortinet / forticlient	5.2.1	5.2.1.x
fortinet / forticlient	5.2.0	5.2.0.x
fortinet / forticlient	6.4.1	6.4.1.x
fortinet / forticlient	6.4.0	6.4.0.x
fortinet / forticlient	6.0.0	6.0.10.x
fortinet / forticlient	5.6.0	5.6.6.x
fortinet / forticlient	5.4.0	5.4.5.x
fortinet / forticlient	5.0.0	5.0.11.x
fortinet / forticlient	4.3.0	4.3.0.x

https://fortiguard.com/advisory/FG-IR-21-167

Vulnerability Database

289,689

CVE-2021-43204