Fortinet FortiOS CVE-2019-5593 Information Disclosure Vulnerability

Description

Fortinet FortiOS is prone to an local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Fortinet FortiOS 6.2.0, 6.0.0 through 6.0.6, 5.6.10 and prior are vulnerable.

Technologies Affected

• Fortinet Fortios 5.6.0
• Fortinet Fortios 5.6.1
• Fortinet Fortios 5.6.10
• Fortinet Fortios 5.6.2
• Fortinet Fortios 5.6.3
• Fortinet Fortios 5.6.4
• Fortinet Fortios 5.6.5
• Fortinet Fortios 5.6.6
• Fortinet Fortios 5.6.7
• Fortinet Fortios 5.6.8
• Fortinet Fortios 5.6.9
• Fortinet Fortios 6.0.0
• Fortinet Fortios 6.0.1
• Fortinet Fortios 6.0.2
• Fortinet Fortios 6.0.3
• Fortinet Fortios 6.0.4
• Fortinet Fortios 6.0.5
• Fortinet Fortios 6.0.6
• Fortinet Fortios 6.2.0

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Allow only trusted individuals to have user accounts and local access to the resources.

Updates are available. Please see the references or vendor advisory for more information.