VULNERABILITY INTELLIGENCE

CVE-2017-14184

CVSS score8.8 HIGH

EPSS probability2.08%

CISA KEVNot currently listed

Published2017-12-15

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

psirt@fortinet.com — Third Party Advisory, VDB Entry
psirt@fortinet.com — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory