Fortinet FortiSIEM Hard-Coded Cryptographic Key Vulnerability Allowing Unauthorized SSH Access

A vulnerability exists in Fortinet FortiSIEM version 5.2.6 due to the use of a hard-coded cryptographic key. This vulnerability may enable a remote, unauthenticated attacker to gain SSH access to the supervisor as the restricted user 'tunneluser'. Exploitation requires knowledge of the private key from another installation or a firmware image.

Impact

Exploitation of this vulnerability could lead to unauthorized SSH access on the affected system, allowing for potential further exploitation or manipulation of the system under the 'tunneluser' account.