CVE-2021-44167

—

CVSS 3.1

7.5 high

EPSS

<1%p43

Published

May 11, 2022 (May 11, 2022)

Modified

Jun 17, 2026

Description

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

Vendors: fortinet
Products: forticlient
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.