CVE-2023-37939

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.2 through 7.2.0 FortiClient for Linux versions 6.2 through 7.2.0 FortiClient for Mac versions 6.2 through 7.2.1

Description The issue allows a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning, due to an exposure of sensitive information to an unauthorized actor. This may enable the attacker to gain access to sensitive information.

Recommendations For FortiClient for Windows versions 6.2 through 7.2.0, update to a version that includes a fix for this issue. For FortiClient for Linux versions 6.2 through 7.2.0, update to a version that includes a fix for this issue. For FortiClient for Mac versions 6.2 through 7.2.1, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to sensitive files and folders to minimize the risk of exploitation.