Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8f4x-4qgh-w73f

Опубликовано: 17 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.

EPSS

Процентиль: 38%
0.00165
Низкий

3.7 Low

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 3.7
nvd
11 месяцев назад

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.

EPSS

Процентиль: 38%
0.00165
Низкий

3.7 Low

CVSS3

Дефекты

CWE-798