CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-11-21
Fortinet FortiOS Hard-coded Cryptographic Key in Configuration Backup Vulnerability (CVE-2019-6693) Advisory
[Affected Scope] FortiOS versions 6.0.4 and below, and 5.6.8 and below, when configuration backups are taken without a custom password
[Impact] An attacker with access to the backup file can decrypt sensitive data, including user passwords, private key passphrases, and High Availability (HA) passwords, using the hard-coded key
[Mitigation] Upgrade FortiOS to patched versions and enforce custom password encryption for all configuration backups