Vulnerability Description
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>
CVSS v3.1 Score
7.5
HIGHVector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H1.6
Exploitability
5.9
Impact
Attack Vector Analysis
Attack Vector
NETWORKAttack Complexity
HIGHPrivileges Required
NONEUser Interaction
REQUIREDScope
UNCHANGEDConfidentiality
HIGHIntegrity
HIGHAvailability
HIGHWeaknesses (CWE)1
Affected Configurations2
References & Resources1
Raw JSON Data