CVE-2023-37939

Published Oct 10, 2023

Last updated a year ago

CVSS low 3.3

Overview

Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.
Source: psirt@fortinet.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 3.3
Impact score: 1.4
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity: LOW

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
psirt@fortinet.com: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2F0755CA-2961-4F74-8044-761178AB0312",
            "versionEndIncluding": "6.2.9",
            "versionStartIncluding": "6.2.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6EE22D2E-DE73-47FE-91DE-4C4B8FDB4C0E",
            "versionEndIncluding": "6.2.9",
            "versionStartIncluding": "6.2.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C5601CD7-A7CE-4FC5-A635-B20B415DC8C4",
            "versionEndIncluding": "6.2.9",
            "versionStartIncluding": "6.2.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*",
            "vulnerable": true,
            "matchCriteriaId": "16EB2BBF-5729-41B5-A093-36E4B2A2C90A",
            "versionEndIncluding": "6.4.9",
            "versionStartIncluding": "6.4.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "vulnerable": true,
            "matchCriteriaId": "525ECB5F-0FCE-4C9C-B939-66667367F573",
            "versionEndIncluding": "6.4.10",
            "versionStartIncluding": "6.4.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4C015491-F83B-4569-B0BB-0877C1D89C66",
            "versionEndIncluding": "6.4.10",
            "versionStartIncluding": "6.4.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F15899F-6A19-4FD6-B736-C42F377B2F90",
            "versionEndIncluding": "7.0.9",
            "versionStartIncluding": "7.0.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1C94527-471A-40B2-9030-6243BAE86579",
            "versionEndIncluding": "7.0.9",
            "versionStartIncluding": "7.0.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8E16F30C-4167-462E-B67E-6B8A449CC591",
            "versionEndIncluding": "7.0.9",
            "versionStartIncluding": "7.0.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*",
            "vulnerable": true,
            "matchCriteriaId": "88271718-0DD4-4717-B403-1B44E2E56C91"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:macos:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21028180-8FA9-43B3-AE71-D4967E7B7DE5"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CEC62C6E-AA05-4AE9-86C5-47D6763206AF"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:macos:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D1BD3792-2AE7-47F9-94E5-376C298EE437"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References