FortiClient SSLVPN Credentials Disclosure Vulnerability

2016年9月12日 1442点热度 0人点赞 0条评论

漏洞类别：Local

漏洞等级：

漏洞信息

FortiClient is a comprehensive endpoint security solution.

An Information Disclosure vulnerability has been identified in FortiClient which reveals SSL-VPN credentials.

Affected Versions:
FortiClient version 5.4 and earlier

漏洞危害

A local attacker can exploit this vulnerability to dump clear text SSL-VPN credentials for FortiClient from memory.

解决方案

Customers are advised to contact Forticlient to patch this vulnerability.

0day