CVE-2019-17659

Name of the Vulnerable Software and Affected Versions FortiSIEM version 5.2.6

Description A use of hard-coded cryptographic key issue may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user tunneluser by leveraging knowledge of the private key from another installation or a firmware image.

Recommendations For FortiSIEM version 5.2.6, consider disabling SSH access for the tunneluser until a fix is available, and restrict access to the supervisor to minimize the risk of exploitation.