CVE-2021-44167

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and…

Medium · published May 11, 2022

CVSS v3.1
6.8
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:W/RC:C
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Published
2022-05-11T14:25Z
EPSS history
Timeline
  • 11 MAY 14:25Z
    An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and…
    cvelistv5