How severe is CVE-2021-44167?

CVE-2021-44167 has a CVSS v3 score of 6.8 (MEDIUM).

CVE-2021-44167

Name: forticlient
Author: fortinet

6.8MEDIUM

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauth

Published: 5/11/2022Updated: 11/21/2024

Description

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

AI AnalysisPowered by AI

Affected Products

fortinetforticlient

References

https://fortiguard.com/psirt/FG-IR-21-232
Vendor Advisory
https://fortiguard.com/psirt/FG-IR-21-232
Vendor Advisory