CVE-2020-9289

2020-06-1620:12:40

fortinet

www.cve.org

0.001 Low

EPSS

Percentile

48.4%

JSON

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key.

CNA Affected

[
  {
    "product": "Fortinet FortiManager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiManager 6.2.3 and below"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-19-007

0.001 Low

EPSS

Percentile

48.4%

JSON

Related for CVELIST:CVE-2020-9289