[FortiClient Mac] Password in clear-text in console window Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-19-227 Final 1 1 2019-11-08T00:00:00 Current version 2019-11-08T00:00:00 2019-11-08T00:00:00 A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway. Information disclosure FortiClient for Mac OS version 6.2.0 and below. FortiClient for Mac OS version 6.0.7 and below. Please upgrade to FortiClient for Mac OS version 6.2.1 and above. Please upgrade to FortiClient for Mac OS version 6.0.8 and above. Fortinet is pleased to thank Raymond Lopez and Mihai Florea for reporting this issue under responsible disclosure and for helping us make our products more secure. CVE-2019-15704 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:X/RC:X https://fortiguard.fortinet.com/psirt/FG-IR-19-227 [FortiClient Mac] Password in clear-text in console window Reference>