THREAT OPS › Threat News › [NVD] CVE-2019-6693 (MEDIUM 6.5) — Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' password
[NVD] CVE-2019-6693 (MEDIUM 6.5) — Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' password
CVE-2019-6693 CVSS: 6.5 MEDIUM Published: 2019-11-21T16:15:13.173
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys
MITRE ATT&CK techniques
- Private KeysT1552.004
Indicators of compromise
- CVE-2019-6693cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2019-6693