CVE-2019-17659

Publication date

2025-03-17 13:06:07

Family

fortinet

State

PUBLISHED

Description

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.