CVE-2019-5587
published 2019-06-04CVE-2019-5587: Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
EPSS
0.48%
38.5th percentile
Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortimanager | — | — |
| fortinet | fortinet | — | — |
| fortinet | fortinet_fortios | — | — |
| fortinet | fortios | < 6.0.5 | 6.0.5 |
| fortinet | fortios | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Fortinet
Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow...
vendor_fortinet·2019-06-04·CVSS 9.8
CVE-2019-5587 [MEDIUM] CWE-345 Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow...
FG-IR-19-017: Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow...
Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.
Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods.
CVEs: CVE-2019-5587, CVE-2019-6695
CWEs: CWE-345
CVSS: 9.8 (critical)
Affected products: FortiManager, FortiOS, Fortinet
GHSA
GHSA-vh73-v9g2-4q7c: Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6
ghsa_unreviewed·2022-05-24
CVE-2019-5587 [MEDIUM] CWE-20 GHSA-vh73-v9g2-4q7c: Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6
Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-06-04
Published