Lucene search

K
fortinetFortiGuard LabsFG-IR-20-049
HistoryJun 01, 2021 - 12:00 a.m.

FortiAuthenticator - Hard-coded cryptographic keys used to encrypt sensitive data

2021-06-0100:00:00
FortiGuard Labs
www.fortiguard.com
19
fortiauthenticator
hard-coded keys
encryption
sensitive data
configuration files
debug logs
attacker access

EPSS

0.002

Percentile

53.8%

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key.

EPSS

0.002

Percentile

53.8%

Related for FG-IR-20-049