4.8
Moyenne
CVE-2025-24473 A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet…
Description
A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiClientWindows 7.2 | 7.2.0 → 7.2.1 | Pas de correctif indiqué |
| FortiClientWindows 7.0 | 7.0.13 → 7.0.14 | Pas de correctif indiqué |
Autres CVE de FortiClientWindows
Les 30 CVE de FortiClientWindows →
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all…
4.7
Moyenne
CVE-2026-70465
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows…
7.3
Élevée
CVE-2026-44278
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,…
2.1
Faible
CVE-2025-62676
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet…
6.4
Moyenne