CVE-2020-9289

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an…

published June 16, 2020

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02169 · 82.1th percentile
Published
2020-06-16T20:12Z
EPSS history
Timeline
  • 16 JUN 20:12Z
    Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an…
    cvelistv5