CVE-2019-16150

CVE-2019-16150 describes a vulnerability in FortiClient for Windows versions prior to 6.4.0, where a hard-coded cryptographic key was used to encrypt sensitive local storage and configuration data. This flaw allows an attacker with local access to decrypt this data due to knowledge of the fixed key. Rated as Medium severity (CVSS 5.5), it requires local access and low privileges, potentially leading to a high impact on confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.