What is CVE-2021-44172?

CVE-2021-44172 is a medium-severity vulnerability in Fortinet Forticlientems, classified under Information Disclosure. CVSS score: 4.3/10. Published 2023-09-13.

How severe is CVE-2021-44172?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Fortinet Forticlientems

CVE-2021-44172

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path.

Vulnerability class: Information Disclosure

EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Fortinet Forticlientems — versions 7.0.6, 7.0.0, 6.4.7
Fortinet Forticlient_endpoint_management_server

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2021-44172?: CVE-2021-44172 is a medium-severity vulnerability in Fortinet Forticlientems, classified under Information Disclosure. CVSS score: 4.3/10. Published 2023-09-13.
How severe is CVE-2021-44172?: Medium severity. CVSS v3 base score is 4.3 out of 10.