{"id":"CVE-2017-17543","state":"PUBLISHED","title":"Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and Fort","description":"Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms.","publishedAt":"2018-04-26T20:00:00.000Z","updatedAt":"2024-10-25T14:32:33.452Z","severity":null,"assigner":"fortinet","products":["Fortinet, Inc. FortiClient for Windows","Fortinet, Inc. FortiClient for Mac OSX","Fortinet, Inc. FortiClient SSLVPN Client for Linux"],"affected":[{"vendor":"Fortinet, Inc.","product":"FortiClient for Windows","versions":[{"version":"5.6.0 and below versions","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient for Mac OSX","versions":[{"version":"5.6.0 and below versions","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient SSLVPN Client for Linux","versions":[{"version":"4.4.2335 and below versions","status":"affected"}]}],"references":["https://fortiguard.com/advisory/FG-IR-17-214"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:28.887Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/17xxx/CVE-2017-17543.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-17543","state":"PUBLISHED","datePublished":"2018-04-26T20:00:00.000Z","dateUpdated":"2024-10-25T14:32:33.452Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2017-12-11T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms."}],"affected":[{"vendor":"Fortinet, Inc.","product":"FortiClient for Windows","versions":[{"version":"5.6.0 and below versions","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient for Mac OSX","versions":[{"version":"5.6.0 and below versions","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient SSLVPN Client for Linux","versions":[{"version":"4.4.2335 and below versions","status":"affected"}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-17-214","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"fortinet","dateUpdated":"2020-05-02T15:27:54.000Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8"},"datePublic":"2017-12-07T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@fortinet.com","DATE_PUBLIC":"2017-12-07T00:00:00","ID":"CVE-2017-17543","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"FortiClient for Windows","version":{"version_data":[{"version_value":"5.6.0 and below versions"}]}},{"product_name":"FortiClient for Mac OSX","version":{"version_data":[{"version_value":"5.6.0 and below versions"}]}},{"product_name":"FortiClient SSLVPN Client for Linux","version":{"version_data":[{"version_value":"4.4.2335 and below versions"}]}}]},"vendor_name":"Fortinet, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Disclosure"}]}]},"references":{"reference_data":[{"name":"https://fortiguard.com/advisory/FG-IR-17-214","refsource":"CONFIRM","url":"https://fortiguard.com/advisory/FG-IR-17-214"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/advisory/FG-IR-17-214","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T20:51:32.155Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-24T20:10:01.644124Z","id":"CVE-2017-17543","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-25T14:32:33.452Z"}}]}}}