PT-2019-5737 · Fortinet · Fortianalyzer+1

Published 2019-11-19 · Updated 2023-07-02 · CVE-2020-9289

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions FortiManager versions 6.2.3 and below FortiAnalyzer versions 6.2.3 and below

Description The issue is related to the use of a hard-coded cryptographic key in the CLI configuration of FortiManager and FortiAnalyzer, which may allow an attacker with access to the CLI configuration or backup file to decrypt sensitive data. This could potentially lead to unauthorized access to protected information.

Recommendations For FortiManager versions 6.2.3 and below, update to a version above 6.2.3 to mitigate the risk. For FortiAnalyzer versions 6.2.3 and below, update to a version above 6.2.3 to mitigate the risk. As a temporary workaround, consider restricting access to the CLI configuration and backup files to minimize the risk of exploitation.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2021-01184

CVE-2020-9289

Affected Products

Fortianalyzer

Fortimanager

References · 7

• 🔥 https://github.com/synacktiv/CVE-2020-9289 · Exploit
• https://fortiguard.com/psirt/FG-IR-19-007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9289 · Security Note
• https://bdu.fstec.ru/vul/2021-01184 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9289 · Vendor Advisory
• https://t.me/proxy_bar/1601 · Telegram Post
• https://t.me/freedomf0x/20096 · Telegram Post