CVE-2021-44172
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path.
Una vulnerabilidad de exposición de información sensible a un actor no autorizado [CWE-200] en FortiClientEMS versiones 7.0.0 a 7.0.4, 7.0.6 a 7.0.7, en todas las versiones de interfaz de administración 6.4 y 6.2 puede permitir que un atacante no autenticado obtenga información en variables de entorno como la ruta de instalación de EMS
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-11-23 CVE Reserved
- 2023-09-13 CVE Published
- 2024-08-04 CVE Updated
- 2024-09-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://fortiguard.com/psirt/FG-IR-21-244 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Fortinet Search vendor "Fortinet" | Forticlient Endpoint Management Server Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" | >= 6.2.0 <= 6.2.9 Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" and version " >= 6.2.0 <= 6.2.9" | - |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Forticlient Endpoint Management Server Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" | >= 6.4.0 <= 6.4.9 Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" and version " >= 6.4.0 <= 6.4.9" | - |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Forticlient Endpoint Management Server Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" | >= 7.0.0 <= 7.0.4 Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" and version " >= 7.0.0 <= 7.0.4" | - |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Forticlient Endpoint Management Server Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" | >= 7.0.6 <= 7.0.7 Search vendor "Fortinet" for product "Forticlient Endpoint Management Server" and version " >= 7.0.6 <= 7.0.7" | - |
Affected
| ||||||