Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2021-44167

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

  • Published: May 11, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-44167
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
fortinet / forticlient 6.2.0 6.2.9.x
fortinet / forticlient 7.0.0 7.0.2.x
fortinet / forticlient 6.4.0 6.4.7.x
fortinet / forticlient 6.0.0 6.0.8.x