A vulnerability exists in Fortinet FortiClient for Windows versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.10, and all versions of 7.0. This flaw involves active debug code that may allow a local attacker to execute the application step-by-step and retrieve saved VPN user passwords. The vulnerability has a medium severity with a CVSS score of 5.5.