CVE-2021-44167
Assigner: fortinet
Published: 2022-05-11T14:25:10
State: PUBLISHED
affected: product: Fortinet FortiClientLinux
vendor: Fortinet
versions: status: affected
version: FortiClientLinux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below
descriptions: value: An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: NONE
remediationLevel: WORKAROUND
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 6.1
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:W/RC:C
version: 3.1
problemTypes: descriptions: description: Information disclosure
type: text