CVE-2019-17659

published 2025-03-17

CVE-2019-17659: A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the…

high 8.1 CVSS 3.1

AV N AC H PR N UI N S U C H I H A H

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortisiem	< 5.2.7	5.2.7
fortinet	fortisiem	—	—
fortinet	fortisiem	—	—

CWE-798