VULNERABILITY INTELLIGENCE
CVE-2019-5587
CVSS score6.5 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2019-06-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.
Weakness classification
- nvd@nist.gov: CWE-345
Primary references
- psirt@fortinet.com — Broken Link
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory