CVSS 3.1
5.0 mediumCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:NCVE-2024-50570
Medium (5.0) in fortinet forticlient. EPSS 0.1% chance of exploitation in the next 30 days.
A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2.0 through 7.2.7, 7.0.0 through 7.0.13 may permit a local authenticated user to retrieve VPN password via memory dump, due to JavaScript's garbage collector
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
- CWE
- CWE-312
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fortinet:forticlient