FortiOS 6.0.6 / FortiClientWindows 6.0.6 / FortiClientMac 6.2.1 XOR Encryption

Fortinet products, including FortiGate and Forticlient, regularly send information to Fortinet servers using XOR “encryption” with a static key. Versions affected include FortiOS versions 6.0.6 and below, FortiClientWindows versions 6.0.6 and below, and FortiClientMac versions 6.2.1 and below.