Sploitus

Exploit for Use of Hard-coded Credentials in Fortinet Fortianalyzer

CVE-2019-6693CVE-2020-9289

githubexploit · 2023-06-30

Exploit Code

README11 lines
## https://sploitus.com/exploit?id=C5499766-0B1B-5009-967D-6CA4700D72F8
# Decrypt FortiManager configuration secrets (CVE-2020-9289)

CVE-2020-9289 and CVE-2019-6693 are related to the same default and hardcoded key.

The only differences on the decryption routine implemented in FortiManager/FortiAnalyzer are:

- The IV handling (all the 16 bytes are provided before the encrypted data from digits).
- The last encrypted block is stripped from the output so it needs junk to be appended then removed from the cleartext.

See https://www.fortiguard.com/psirt/FG-IR-19-007 for more details.