CVE-2019-17659

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.

Score

CVSS 3.1 8.1 High

Status

Analyzed - psirt@fortinet.com

Published

2025-03-17

Last modified

2025-03-17

Weaknesses

CWE-798

Affected products

• Fortisiem (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-19-296