What’s Vulnerable › Vulnerabilities
CVE-2019-5593
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-01-23 · updated 2026-06-17
- Weakness: CWE-755
Description
Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below.
Affected products
- Fortinet FortiOS (FortiGate): through 5.6.10; from 6.0.0 through 6.0.6; 6.2.0
References
Get alerted when CVE-2019-5593 or the next vulnerability affects your stack