PSIRT[FortiClient Mac] Password in clear-text in console window
Summary
A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway.
Affected Products
FortiClient for Mac OS version 6.2.0 and below.
FortiClient for Mac OS version 6.0.7 and below.
Solutions
Please upgrade to FortiClient for Mac OS version 6.2.1 and above.
Please upgrade to FortiClient for Mac OS version 6.0.8 and above.
Acknowledgement
Fortinet is pleased to thank Raymond Lopez and Mihai Florea for reporting this issue under responsible disclosure and for helping us make our products more secure.