Vulnerability Description
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortisiem | >= 5.0.0, <= 5.2.5 |
Related Weaknesses (CWE)
References
- https://fortiguard.com/advisory/FG-IR-19-195Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-19-195Vendor Advisory
FAQ
What is CVE-2019-16153?
CVE-2019-16153 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
How severe is CVE-2019-16153?
CVE-2019-16153 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-16153?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortisiem.