First published: Fri Aug 23 2019(Updated: )
Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods.
Credit: psirt@fortinet.com
Affected Software | Affected Version | How to fix |
---|---|---|
Fortinet FortiManager | <=6.0.6 | |
Fortinet FortiManager | =6.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-6695 is a vulnerability in Fortinet FortiManager VM application images of version 6.2.0, 6.0.6 and below that allows an attacker to implant third-party programs by recreating the image through specific methods.
CVE-2019-6695 has a severity rating of 9.8 (Critical).
Fortinet FortiManager versions 6.2.0, 6.0.6 and below are affected by CVE-2019-6695.
Yes, it is recommended to update to a version of Fortinet FortiManager that is not affected by CVE-2019-6695.
You can find more information about CVE-2019-6695 in the FortiGuard advisory FG-IR-19-017.