CVE-2020-6648: [FortiOS] Sensitive information is displayed in cleartext in the CLI window when using diagnose sys ha checksum command
A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an authenticated attacker to obtain sensitive information such as users passwords by connecting to FortiGate CLI and executing the "diag sys ha checksum show" command.
Other sources
A cleartext storage of sensitive information vulnerability in FortiOS command line interface may allow an authenticated attacker to obtain sensitive information such as users passwords by connecting to FortiGate CLI and executing the "diag sys ha checksum show" command.
— FortiGuard
A cleartext storage of sensitive information vulnerability in FortiProxy command line interface may allow an authenticated attacker to obtain sensitive information such as VPN user's passwords by connecting to FortiProxy CLI and executing the "diagnose sys ha checksum show" command.
— FortiGuard
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-6648.
What is the severity of CVE-2020-6648?
The severity of CVE-2020-6648 is medium with a severity value of 6.5.
Which products are affected by CVE-2020-6648?
Fortinet FortiProxy versions up to 1.2.10, 2.0.0, and Fortinet FortiOS versions up to 6.0.12 and between 6.2.0 and 6.2.5 are affected by CVE-2020-6648.
How can an attacker exploit CVE-2020-6648?
An authenticated attacker can exploit CVE-2020-6648 by connecting to the FortiGate CLI and executing specific commands to obtain sensitive information.
Are there any references available for CVE-2020-6648?
Yes, you can find references for CVE-2020-6648 at the following links: [Reference 1] [Reference 2].