A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2.0 through 7.2.7, 7.0.0 through 7.0.13 may permit a local authenticated user to retrieve VPN password via memory dump, due to JavaScript's garbage collector
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-23-278 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Jul 2025, 19:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet
Fortinet forticlient |
|
| CPE | cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:* |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-23-278 - Vendor Advisory |
18 Dec 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-18 13:15
Updated : 2025-07-24 19:02
NVD link : CVE-2024-50570
Mitre link : CVE-2024-50570
JSON object : View
Products Affected
fortinet
- forticlient
CWE
CWE-312
Cleartext Storage of Sensitive Information