CVE-2023-37939: Infoleak
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-37939.
What is the severity of CVE-2023-37939?
The severity of CVE-2023-37939 is low.
Which software versions are affected by CVE-2023-37939?
FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions are affected by CVE-2023-37939.
What is the vulnerability type of CVE-2023-37939?
CVE-2023-37939 is classified as an exposure of sensitive information to an unauthorized actor vulnerability [CWE-200].
How can I fix CVE-2023-37939?
There is no official fix available at the moment. It is recommended to closely monitor the vendor's website for any updates or patches to address this vulnerability.