CVE-2019-16150

2020-06-0412:27:29

fortinet

www.cve.org

AI Score

5.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local storage or the configuration backup file to decrypt the sensitive data via knowledge of the hard-coded key.

CNA Affected

[
  {
    "product": "Fortinet FortiClient for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiClient for Windows below 6.4.0"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-19-194