A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Forticlient | Fortinet | 6.4.0 (including) | 7.2.9 (excluding) |
| Forticlient | Fortinet | 7.4.0 (including) | 7.4.0 (including) |