The host is installed with Fortinet FortiClient 7.0.0 through 7.0.5 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to handle issues in logstream for the FortiTray process. Successful exploitation could allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal.