CVE-2017-14184

8.8 highEPSS 2.1%

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient
fortinet:forticlient_sslvpn_client

References

http://www.securityfocus.com/bid/102123
https://fortiguard.com/advisory/FG-IR-17-214
http://www.securityfocus.com/bid/102123
https://fortiguard.com/advisory/FG-IR-17-214

Check your stack JSON