CVE-2019-6693 PoC — Fortinet FortiOS 信任管理问题漏洞

Description

Decrypt reversible secrets encrypted using the default hardcoded key related to CVE-2020-9289 on FortiAnalyzer/FortiManager (the only difference with CVE-2019-6693 is the encryption routine).

介绍

# Decrypt FortiManager configuration secrets (CVE-2020-9289)

CVE-2020-9289 and CVE-2019-6693 are related to the same default and hardcoded key.

The only differences on the decryption routine implemented in FortiManager/FortiAnalyzer are:

- The IV handling (all the 16 bytes are provided before the encrypted data from digits).
- The last encrypted block is stripped from the output so it needs junk to be appended then removed from the cleartext.

See https://www.fortiguard.com/psirt/FG-IR-19-007 for more details.

文件快照

备注