CVE-2019-5592 Information disclosure in Fortinet IPS Engine
Attackers can decipher TLS traffic via padding oracle attacks in FortiOS IPS engine when SSL Deep Inspection and IPS sensors are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5592?
CVE-2019-5592 is a medium-severity vulnerability in Fortinet IPS Engine, published on 23 Aug 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position.
Weakness: CWE-347
Which versions are affected by CVE-2019-5592?
It affects 1 product.
Products include Fortinet Fortios Ips Engine.
How do I fix CVE-2019-5592?
No fix has been published for CVE-2019-5592 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-5592 being exploited?
There is no known exploitation of CVE-2019-5592 in the wild and no public exploit code.
Other vulnerabilities in Fortinet IPS Engine
Sources
Also known as GHSA-3xmc-3r4g-3qf4.