TI-2017-10335 Aliases CVE-2017-14184 GHSA-6gmg-c6p4-v53m

Information disclosure in Fortinet FortiClient for Windows

MEDIUM 44CWE-200Published 2017-12-15 · Updated 2024-10-25

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02081 81st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Fortinet	FortiClient for Windows	up to 5.6.0	—	No fix listed	CNA
Fortinet	FortiClient for Mac OSX	up to 5.6.0	—	No fix listed	CNA
Fortinet	FortiClient SSLVPN Client for Linux	up to 4.4.2334	—	No fix listed	CNA

FortiClient for Windows VendorFortinet Affected up to 5.6.0 Fixed in — No fix listed CNA
FortiClient for Mac OSX VendorFortinet Affected up to 5.6.0 Fixed in — No fix listed CNA
FortiClient SSLVPN Client for Linux VendorFortinet Affected up to 4.4.2334 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:fortinet:forticlient::::::windows::*	before 5.6.0	Vulnerable	Fortinet
cpe:2.3:a:fortinet:forticlient::::::macos::*	before 5.6.0	Vulnerable	Fortinet
cpe:2.3:a:fortinet:forticlient_sslvpn_client::::::linux::*	before 4.4.2334	Vulnerable	Fortinet

cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* Versions before 5.6.0 Vulnerable ·Fortinet
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:* Versions before 5.6.0 Vulnerable ·Fortinet
cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:* Versions before 4.4.2334 Vulnerable ·Fortinet

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2017-14184
2026-10-03 Alias added: GHSA-6gmg-c6p4-v53m

References

Advisory 1

https://fortiguard.com/advisory/FG-IR-17-214

TI-2019-13180 An unquoted service path vulnerability in the FortiClient FortiTray component of… CVSS 3.1CRITICAL 9.8
TI-2023-24393 Code injection in Fortinet FortiClientLinux CVSS 3.1CRITICAL 9.4
TI-2016-06998 In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability. CVSS 3.0HIGH 8.8
TI-2019-03954 Untrusted search path in Fortinet FortiClientWindows CVSS 3.1HIGH 8.6
TI-2017-05007 A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0… CVSS 3.0HIGH 8.1
TI-2024-03415 DHCP routing options can manipulate interface-based VPN traffic CVSS 3.1HIGH 7.6

See all 85 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences