CVE-2019-5592

Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position.

CVSS v3 5.9 MEDIUM
CVSS v2.0 4.3 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://fortiguard.com/advisory/FG-IR-19-145	Vendor Advisory
https://fortiguard.com/advisory/FG-IR-19-145	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortios_ips_engine::::::::
	cpe:2.3:a:fortinet:fortios_ips_engine::::::::
	cpe:2.3:a:fortinet:fortios_ips_engine::::::::
	cpe:2.3:a:fortinet:fortios_ips_engine::::::::

History

21 Nov 2024, 04:45

Type	Values Removed	Values Added
References	~~() https://fortiguard.com/advisory/FG-IR-19-145 - Vendor Advisory~~	() https://fortiguard.com/advisory/FG-IR-19-145 - Vendor Advisory

Information

Published : 2019-08-23 20:15

Updated : 2024-11-21 04:45

NVD link : CVE-2019-5592

Mitre link : CVE-2019-5592

CVE.ORG link : CVE-2019-5592

JSON object : View

Products Affected

fortinet

fortios_ips_engine

CWE

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2019-5592", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2019-08-23T20:15:10.347", "references": [{"url": "https://fortiguard.com/advisory/FG-IR-19-145", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}, {"url": "https://fortiguard.com/advisory/FG-IR-19-145", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de relleno de Oracle (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) en la implementaci\u00f3n de relleno CBC de FortiOS IPS motor versi\u00f3n 5.000 a 5.006, 4.000 a 4.036, 4.200 a 4.219, 3.547 y menores, cuando se configura con pol\u00edticas de inspecci\u00f3n profunda SSL y con el sensor IPS habilitado puede permitir que un atacante descifre las conexiones TLS que atraviesan el FortiGate a trav\u00e9s del monitoreo del tr\u00e1fico en una posici\u00f3n de hombre en el medio."}], "lastModified": "2024-11-21T04:45:11.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "830DC4A3-9C25-4314-9F20-BB6075605D69", "versionEndIncluding": "3.00547"}, {"criteria": "cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FB91C93-AFCA-4385-8999-71CB5BC1E6AA", "versionEndIncluding": "4.00036", "versionStartIncluding": "4.00000"}, {"criteria": "cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52FCCBD8-CD08-4C75-8029-740B1C452066", "versionEndIncluding": "4.00219", "versionStartIncluding": "4.00200"}, {"criteria": "cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E01C21FE-03D3-4374-8017-7CA189E3ED5A", "versionEndIncluding": "5.00006", "versionStartIncluding": "5.00000"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}