This vulnerability in Fortinet FortiClientEMS arises from improper certificate validation in affected versions, potentially allowing an attacker to cause information disclosure. The affected versions explicitly include 7.2 all versions, 7.4.0, 7.4.1, and 7.4.3. The CVSS 3.1 vector indicates network attack vector with high complexity, no privileges required, user interaction required, and impacts confidentiality, integrity, and availability with high severity. The vendor has released an official fix to address this vulnerability.

Successful exploitation of this vulnerability could lead to disclosure of sensitive information, impacting confidentiality. The CVSS vector also indicates potential impacts on integrity and availability. However, exploitation requires user interaction and has high attack complexity, reducing the likelihood of widespread exploitation. No known exploits are reported in the wild at this time.

An official fix is available from Fortinet for the affected versions of FortiClientEMS. Users and administrators should apply the vendor-provided patches promptly to remediate this vulnerability. Since the vendor advisory confirms an official fix, applying the patch is the recommended mitigation.