CVE-2021-44167medium

CVE-2021-44167: medium-severity vulnerability in Fortinet FortiClientLinux

Published · Updated

Follow this CVE+ Monitor FortiClientLinux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.5%
An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:W/RC:C
Affected products
Fortinet · Fortinet FortiClientLinux
Related CVEs — Fortinet FortiClientLinux

In the same product, most dangerous first.

CVE-2019-17652—CVE-2019-17652EPSS 1.4%CVE-2019-16152—CVE-2019-16152EPSS 1.4%CVE-2021-43205MEDIUMCVE-2021-43205EPSS 0.9%CVE-2019-15711—CVE-2019-15711EPSS 0.5%CVE-2021-22127HIGHCVE-2021-22127EPSS 0.5%CVE-2019-16155—CVE-2019-16155EPSS 0.4%