CVE-2019-5593 - Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below

Back Back to CVE browser

MEDIUM

Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below

Published Jan 23, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below.

Affected products

Vendor n/a Product Fortinet FortiOS Default
n/a
- Version
  FortiOS 6.2.0 to 6.2.1, 6.0.6 and below
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Fortinet FortiOS

n/a

Version	Status	Constraints
FortiOS 6.2.0 to 6.2.1, 6.0.6 and below	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-755

References (1)

https://fortiguard.com/psirt/FG-IR-19-134
x_refsource_MISCMitigationVendor Advisory

Link	Providers	Tags
https://fortiguard.com/psirt/FG-IR-19-134		x_refsource_MISCMitigationVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner fortinet

Published Jan 23, 2020

Updated Oct 25, 2024

Reserved Jan 7, 2019

Link CVE-2019-5593

CISA Vulnrichment

Updated Oct 23, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5593

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5593