Skip to content
Sign in
2.2 Low

CVE-2022-33878 An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions…

Description

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiClientMac Versions not published

Other CVEs of Fortinet FortiClientMac

The 3 CVEs of Fortinet FortiClientMac →
CVE-2021-42754 An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and… 3.2 Low CVE-2021-26089 An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute… 6.7 Medium
Track this CVE