CVE-2019-5589

HighCVSS 8.8/10Last modified Oct 13, 2026

Description

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

VendorProductVersions
FortinetFortiClientWindows>= 6.0.0, <= 6.0.5; >= 5.6.0, <= 5.6.6; >= 5.4.0, <= 5.4.5; >= 5.2.0, <= 5.2.6; >= 5.0.0, <= 5.0.11; >= 4.3.0, <= 4.3.5; >= 4.2.0, <= 4.2.7; >= 4.1.0, <= 4.1.3; >= 4.0.1, <= 4.0.4; >= 5.6.0, < 5.6.*

References

Timeline

Published
May 28, 2019
Last modified
Oct 13, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-55906.1The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized cCVE-2019-55916.5A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive informationCVE-2019-55925.9Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engCVE-2019-55935.5Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keysCVE-2019-55946.1An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin CVE-2019-55955.5In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not proCVE-2019-55968.8In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the rCVE-2019-55979.1In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a CVE-2019-55987.5In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RECVE-2019-55997.5In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attackerCVE-2019-56009.8In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, andCVE-2019-56016.5In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE
CVE-2019-5589: High severity, CVSS 8.8 | Vulnix