3.0
Low
CVE-2023-37939 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows…
Description
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientMac 7.2 | 7.2.0 → 7.2.1 | No fix stated |
| FortiClientMac 7.0 | 7.0.0 → 7.0.9 | No fix stated |
| FortiClientMac 6.4 | 6.4.0 → 6.4.10 | No fix stated |
| FortiClientMac 6.2 | 6.2.0 → 6.2.9 | No fix stated |
| FortiClientWindows | 7.2.0 | No fix stated |
| FortiClientWindows 7.0 | 7.0.0 → 7.0.9 | No fix stated |
| FortiClientWindows 6.4 | 6.4.0 → 6.4.10 | No fix stated |
| FortiClientWindows 6.2 | 6.2.0 → 6.2.9 | No fix stated |
| FortiClientLinux | 7.2.0 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientLinux 7.0 | 7.0.0 → 7.0.9 | No fix stated |
| FortiClientLinux 6.4 | 6.4.0 → 6.4.9 | No fix stated |
| FortiClientLinux 6.2 | 6.2.0 → 6.2.9 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiClientMac
The 15 CVEs of FortiClientMac →
CVE-2025-46774
An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2…
6.8
Medium
CVE-2025-31365
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through…
5.5
Medium
CVE-2025-57741
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through…
7.0
High
CVE-2025-25251
An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0…
7.4
High