description: A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to perform a man-in-the-middle attack between the EMS and the FCT via the telemetry protocol.
problem types: Information disclosure
affected:
{
product: Fortinet FortiClientEMS, FortiClientWindows, FortiClientLinux, FortiClientMac
vendor: Fortinet
versions:
status: affected, version: FortiClientEMS 7.0.1 and below,  6.4.6 and below, FortiClientWindows, FortiClientLinux, FortiClientMac 7.0.1 and below,  6.4.6 and below.
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: LOW
exploitCodeMaturity: FUNCTIONAL
integrityImpact: HIGH
privilegesRequired: NONE
remediationLevel: UNAVAILABLE
reportConfidence: CONFIRMED
scope: CHANGED
temporalScore: 8
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H/E:F/RL:U/RC:C
version: 3.1
]