CVE-2017-14184 Vulnerability Details

  /     /     /  

CVE-2017-14184 Metadata Quick Info

CVE Published: 15/12/2017 | CVE Updated: 25/10/2024 | CVE Year: 2017
Source: fortinet | Vendor: Fortinet, Inc. | Product: FortiClient for Windows
Status : PUBLISHED

---

CVE-2017-14184 Description

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other\'s VPN authentication credentials due to improperly secured storage locations.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Information Disclosure
Source: Fortinet, Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).