CVE-2019-5593: Medium severity fortios vulnerability
Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5593?
CVE-2019-5593 has a severity rating classified as critical due to the potential exposure of private keys.
How do I fix CVE-2019-5593?
To mitigate CVE-2019-5593, ensure that you upgrade FortiOS to a version above 6.2.0, 6.0.6, and 5.6.10.
What are the consequences of CVE-2019-5593?
The vulnerability allows unauthorized users to access plaintext private keys, which can compromise the security of the system.
Who is affected by CVE-2019-5593?
CVE-2019-5593 affects users of FortiOS versions 5.6.10 and below, as well as specific versions between 6.0.0 and 6.0.6, and 6.2.0.
Is there a workaround for CVE-2019-5593?
While the best solution is to upgrade to a patched version, users may also restrict access to the CLI console as a temporary measure.