CVE-2021-43205

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Apr 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-432064.3A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.xCVE-2021-432077.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-432087.83D Viewer Remote Code Execution VulnerabilityCVE-2021-432097.83D Viewer Remote Code Execution VulnerabilityCVE-2021-43214.3Policy bypass in Blink in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTMLCVE-2021-432115.5Windows 10 Update Assistant Elevation of Privilege VulnerabilityCVE-2021-432149.8Web Media Extensions Remote Code Execution VulnerabilityCVE-2021-432159.8iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code ExecutionCVE-2021-432166.5Microsoft Local Security Authority (LSA) Server Information Disclosure VulnerabilityCVE-2021-432179.8Windows Encrypting File System (EFS) Remote Code Execution VulnerabilityCVE-2021-432197.5DirectX Graphics Kernel File Denial of Service VulnerabilityCVE-2021-43228.8Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension
CVE-2021-43205: Medium severity, CVSS 5.3 | Vulnix