Vulnerabilities > Fortinet > Forticlient > High

DATE CVE VULNERABILITY TITLE RISK
2017-12-15 CVE-2017-14184 Information Exposure vulnerability in Fortinet Forticlient
An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.
network
low complexity
fortinet CWE-200
8.8
2017-12-14 CVE-2017-7344 Unspecified vulnerability in Fortinet Forticlient
A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain.
network
high complexity
fortinet
8.1
2017-06-26 CVE-2016-8493 Permissions, Privileges, and Access Controls vulnerability in Fortinet Forticlient 5.4.1/5.4.2
In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.
network
low complexity
fortinet CWE-264
8.8
2016-01-08 CVE-2015-7362 Permissions, Privileges, and Access Controls vulnerability in Fortinet Forticlient
Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc setuid program.
local
low complexity
fortinet CWE-264
7.8