description: A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0.13 and FortiAuthenticator version 5.5.0 and all versions of 6.1 and 6.0 may allow a local unauthorized party to retrieve the Fortinet private keys used to establish secure communication with both Apple Push Notification and Google Cloud Messaging services, via accessing the files on the filesystem.
problem types: Information disclosure
affected:
{
vendor: Fortinet
product: FortiAuthenticator
defaultStatus: unaffected
versions:
version: 6.1.0, status: affected
versionType: semver, version: 6.0.0, lessThanOrEqual: 6.0.4, status: affected
version: 5.5.0, status: affected
}
{
vendor: Fortinet
product: FortiOS
defaultStatus: unaffected
versions:
versionType: semver, version: 6.4.0, lessThanOrEqual: 6.4.1, status: affected
versionType: semver, version: 6.2.0, lessThanOrEqual: 6.2.9, status: affected
versionType: semver, version: 6.0.0, lessThanOrEqual: 6.0.13, status: affected
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:X/RC:X
]
solutions: Please upgrade to FortiGate version 6.4.2 or above.
Please upgrade to FortiOS version 6.2.10 or above
Please upgrade to FortiOS version 6.0.14 or above
Please upgrade to FortiAuthenticator version 6.2.0 or above
Please upgrade to FortiAuthenticator version 6.1.1 or above
Please upgrade to FortiAuthenticator version 6.0.5 or above
Workaround in FortiOS:
Disable the FTM push service by using the below commands:
config system ftm-push
set status disable
end