Medium · published November 21, 2019
CVSS calls it medium at 6.5. It is confirmed in active exploitation. It sits in the 93.9th percentile for exploit probability.
⚠️ A hard-coded cryptographic key in FortiOS is like having a master passcode that's written on a sticky note! 🔑 If attackers get their hands on a backup file, they'll unlock sensitive data with ease. Imagine a vault that's supposed to keep your secrets safe, but the key is taped right on the door. That's how this vulnerability works, allowing anyone with the backup file to access users' passwords and sensitive configurations without breaking a sweat. If an attacker manages to obtain the FortiOS configuration backup, they can easily decipher sensitive information, including users' passwords (excluding the administrator's!) and private key passphrases. This could lead to unauthorized access and a potential breach of trust, as sensitive data is laid bare!
Imagine a vault that's supposed to keep your secrets safe, but the key is taped right on the door. That's how this vulnerability works, allowing anyone with the backup file to access users' passwords and sensitive configurations without breaking a sweat. This vulnerability involves the use of a hard-coded cryptographic key within FortiOS, which allows attackers with access to the configuration backup files to decrypt sensitive information that should remain confidential.
If an attacker manages to obtain the FortiOS configuration backup, they can easily decipher sensitive information, including users' passwords (excluding the administrator's!) and private key passphrases. This could lead to unauthorized access and a potential breach of trust, as sensitive data is laid bare! To remediate this issue, update to FortiOS version 6.0.9 or later, where this vulnerability has been addressed. Additionally, review your backup procedures to ensure sensitive data is secured with unique and strong encryption methods. You've got this! With the right updates and practices, you'll keep your data as safe as a vault! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| fortinet/fortios | ≤ 5.6.10 | — |
| fortinet/fortios | ≥ 6.0.0, ≤ 6.0.6 | — |
| fortinet/fortios | all versions | — |