Vulnerability Description
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Forticlient | >= 6.2.0, <= 6.2.9 |
Related Weaknesses (CWE)
References
- https://fortiguard.com/psirt/FG-IR-22-235Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-22-235Vendor Advisory
FAQ
What is CVE-2023-37939?
CVE-2023-37939 is a vulnerability with a CVSS score of 3.3 (LOW). An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versi...
How severe is CVE-2023-37939?
CVE-2023-37939 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-37939?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Forticlient.