CVE-2022-33878

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal.
References
Link Resource
https://fortiguard.com/psirt/FG-IR-22-246 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*

History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-532 CWE-200

04 Nov 2022, 14:10

Type Values Removed Values Added
CPE cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*
References (CONFIRM) https://fortiguard.com/psirt/FG-IR-22-246 - (CONFIRM) https://fortiguard.com/psirt/FG-IR-22-246 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-532

02 Nov 2022, 12:46

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-02 12:15

Updated : 2024-02-04 22:51


NVD link : CVE-2022-33878

Mitre link : CVE-2022-33878

CVE.ORG link : CVE-2022-33878


JSON object : View

Products Affected

fortinet

  • forticlient
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor