CVE-2017-14184

EPSS 2.1%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 dic 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Productos afectados

Fortinet, Inc. · FortiClient for Mac OSX Fortinet, Inc. · FortiClient for Windows Fortinet, Inc. · FortiClient SSLVPN Client for Linux

Referencias

https://fortiguard.com/advisory/FG-IR-17-214 http://www.securityfocus.com/bid/102123