Is Fortinet Support Tool safe?
Fortinet Support Tool is medium risk. Submitting a Fortinet Support Tool capture bundles a client-info.json file listing your installed browser extensions. The inventory comes from chrome.management.getAll() and includes names, versions, and descriptions.
Who publishes itFortinet, Inc. - 6 other listings from the same operator, 1 of them carrying a finding
Fortinet, Inc. - 6 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 7k+ users between them, none of them carrying a finding.
Same operator - 4 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Capture bundle includes the user's installed extension inventory.
Submitting a Fortinet Support Tool capture bundles a client-info.json file listing your installed browser extensions.
The inventory comes from chrome.management.getAll() and includes names, versions, and descriptions.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user generates a support capture bundle.
The extension adds client-info.json containing installed extension names, versions, and descriptions.
- Installed extension inventoryAd blocker 5.1.0 (illustrative)
This reveals the browser extensions present in the profile, including security tools or other sensitive add-ons.
Dynamic analysis confirmed that the capture bundle writes the gathered client information to client-info.json inside the ZIP.