VULNERABILITY INTELLIGENCE

CVE-2019-6700

CVSS score6.5 MEDIUM
EPSS probability0.89%
CISA KEVNot currently listed
Published2020-01-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-522: Insufficiently Protected Credentials

Primary references