We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2019-6693



Description

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys' passphrases and High Availability password (when set).

Reserved 2019-01-23 | Published 2019-11-21 | Updated 2025-06-25 | Assigner fortinet

CISA Known Exploited Vulnerability

Date added 2025-06-25 | Due date 2025-07-16

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Problem types

Information disclosure

Product status

5.6.9 and below
affected

6.0.5 and below
affected

6.2.0
affected

References

fortiguard.com/advisory/FG-IR-19-007

cve.org (CVE-2019-6693)

nvd.nist.gov (CVE-2019-6693)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2019-6693

Support options

Helpdesk Chat, Email, Knowledgebase