VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jun 16, 2020· Updated Jun 17, 2026

CVE-2019-17655

CVE-2019-17655

Description

A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an attacker to retrieve a logged-in SSL VPN user's credentials should that attacker be able to read the session file stored on the targeted device's system.

Affected products

4
  • Fortinet/Fortios
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
    Range: <6.2.3
  • Fortinet/FortiOS SSL VPNllm-fuzzy
    Range: 6.2.0 through 6.2.2, 6.0.9 and earlier
  • Fortinet/Fortiproxyllm-fuzzy
    Range: 2.0.0, 1.2.9 and earlier
  • Fortinet/Fortinet FortiOS and FortiProxyv5
    Range: FortiOS 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.