CVE-2022-33878: Fortinet FortiClient

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal.

Affected products

• Fortinet FortiClient: from 7.0.0, up to and including 7.0.5

Published 2022-11-02. Last modified 2026-06-17.