CVEvulnerability
CVE-2019-5587
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-345
Description
Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.
Affected configurations
• fortinet fortios (< 6.0.5)
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness
References
- http://www.securityfocus.com/bid/108628 Broken Link
- https://fortiguard.com/advisory/FG-IR-19-017 Vendor Advisory
- http://www.securityfocus.com/bid/108628 Broken Link
- https://fortiguard.com/advisory/FG-IR-19-017 Vendor Advisory