CVE-2019-6700

2020-01-0718:19:04

fortinet

www.cve.org

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.

CNA Affected

[
  {
    "product": "Fortinet FortiSIEM",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiSIEM 5.2.2 and earlier"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-19-100