CVEvulnerability
CVE-2021-43204
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-12-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Description
A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.
Affected configurations
• fortinet forticlient (>= 5.0.0 <= 5.0.11)
• fortinet forticlient (>= 5.4.0 <= 5.4.5)
• fortinet forticlient (>= 5.6.0 <= 5.6.6)
• fortinet forticlient (>= 6.0.0 <= 6.0.10)
• fortinet forticlient (>= 6.2.0 <= 6.2.9)
• fortinet forticlient 4.0.1
• fortinet forticlient 4.0.2
• fortinet forticlient 4.0.3
• fortinet forticlient 4.0.4
• fortinet forticlient 4.1.0
• fortinet forticlient 4.1.1
• fortinet forticlient 4.1.2
• fortinet forticlient 4.1.3
• fortinet forticlient 4.2.0
• fortinet forticlient 4.2.1
• fortinet forticlient 4.2.2
• fortinet forticlient 4.2.3
• fortinet forticlient 4.2.4
• fortinet forticlient 4.2.5
• fortinet forticlient 4.2.6
• fortinet forticlient 4.2.7
• fortinet forticlient 4.3.0
• fortinet forticlient 4.3.1
• fortinet forticlient 4.3.2
• fortinet forticlient 4.3.3
• fortinet forticlient 4.3.4
• fortinet forticlient 4.3.5
• fortinet forticlient 5.2.0
• fortinet forticlient 5.2.1
• fortinet forticlient 5.2.2
• fortinet forticlient 5.2.3
• fortinet forticlient 5.2.4
• fortinet forticlient 5.2.5
• fortinet forticlient 5.2.6
• fortinet forticlient 6.4.0
• fortinet forticlient 6.4.1
References
- https://fortiguard.com/advisory/FG-IR-21-167 Patch, Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-21-167 Patch, Vendor Advisory