CVE-2017-14184: Fortinet FortiClient

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations.

Affected products

• Fortinet FortiClient: before 5.6.0 (fixed in 5.6.0)
• Fortinet FortiClient SSLVPN Client: before 4.4.2334 (fixed in 4.4.2334)

Published 2017-12-15. Last modified 2026-06-17.