Hard-Coded Password Vulnerability in Fortinet FortiSIEM Database Component
CVE-2019-16153

9.8CRITICAL

Key Information:

Vendor
Fortinet
Status
Fortinet Fortisiem
Vendor
CVE Published:
23 January 2020

Summary

A hard-coded password vulnerability exists in the Fortinet FortiSIEM database component, specifically in versions 5.2.5 and earlier. This flaw allows unauthorized access to the device's database through the exploitation of static credentials, enabling potential attackers to bypass security measures and gain access to sensitive information.

Affected Version(s)

Fortinet FortiSIEM FortiSIEM 5.2.5 and below

References

https://fortiguard.com/advisory/FG-IR-19-195
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.