What is CVE-2019-6700?

CVE-2019-6700 is a medium-severity vulnerability in Fortinet Fortisiem, classified under Information Disclosure. CVSS score: 6.5/10. Published 2020-01-07.

How severe is CVE-2019-6700?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Fortinet Fortisiem

CVE-2019-6700

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Fortinet Fortisiem
N/a Fortinet Fortisiem — versions FortiSIEM 5.2.2 and earlier

Weakness classification (CWE)

CWE-200 — Information Disclosure
CWE-522 — Insufficiently Protected Credentials

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6700?: CVE-2019-6700 is a medium-severity vulnerability in Fortinet Fortisiem, classified under Information Disclosure. CVSS score: 6.5/10. Published 2020-01-07.
How severe is CVE-2019-6700?: Medium severity. CVSS v3 base score is 6.5 out of 10.