description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.
problem types: Information disclosure
affected:
{
vendor: Fortinet
product: FortiClientMac
defaultStatus: unaffected
versions:
versionType: semver, version: 7.2.0, lessThanOrEqual: 7.2.1, status: affected
versionType: semver, version: 7.0.0, lessThanOrEqual: 7.0.9, status: affected
versionType: semver, version: 6.4.0, lessThanOrEqual: 6.4.10, status: affected
versionType: semver, version: 6.2.0, lessThanOrEqual: 6.2.9, status: affected
}
{
vendor: Fortinet
product: FortiClientWindows
defaultStatus: unaffected
versions:
version: 7.2.0, status: affected
versionType: semver, version: 7.0.0, lessThanOrEqual: 7.0.9, status: affected
versionType: semver, version: 6.4.0, lessThanOrEqual: 6.4.10, status: affected
versionType: semver, version: 6.2.0, lessThanOrEqual: 6.2.9, status: affected
}
{
vendor: Fortinet
product: FortiClientLinux
defaultStatus: unaffected
versions:
version: 7.2.0, status: affected
versionType: semver, version: 7.0.6, lessThanOrEqual: 7.0.9, status: affected
versionType: semver, version: 7.0.0, lessThanOrEqual: 7.0.4, status: affected
versionType: semver, version: 6.4.7, lessThanOrEqual: 6.4.9, status: affected
versionType: semver, version: 6.4.0, lessThanOrEqual: 6.4.4, status: affected
versionType: semver, version: 6.2.6, lessThanOrEqual: 6.2.9, status: affected
versionType: semver, version: 6.2.0, lessThanOrEqual: 6.2.4, status: affected
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:R
]
solutions: Please upgrade to FortiClientMac version 7.2.2 or above Please upgrade to FortiClientWindows version 7.2.1 or above Please upgrade to FortiClientLinux version 7.2.1 or above