CVE-2021-43205

5.3 mediumEPSS 0.9%

Medium (5.3) in fortinet forticlient. EPSS 0.9% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2022-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient

References

https://fortiguard.com/psirt/FG-IR-21-226
https://fortiguard.com/psirt/FG-IR-21-226

Check your stack JSON