CVE-2021-43205: Fortinet FortiClient

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.

Affected products

• Fortinet FortiClient: from 6.2.0, up to and including 6.2.4; from 6.2.6, up to and including 6.2.9; from 6.4.0, up to and including 6.4.4; from 7.0.0, up to and including 7.0.2; version 6.4.7 only

Published 2022-04-06. Last modified 2026-06-17.