CVE-2020-6648

State: Published
Severity: 5.3 Medium
Published: Oct 21, 2020
Updated: Oct 25, 2024
Reserved: Jan 9, 2020

Description

A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an authenticated attacker to obtain sensitive information such as users passwords by connecting to FortiGate CLI and executing the "diag sys ha checksum show" command.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	fortinet

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
FortiGate and FortiProxyFortinet	FortiOS versions 6.2.4 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier.Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.