{"id":"CVE-2019-5587","aliases":["EUVD-2019-15162","GHSA-vh73-v9g2-4q7c"],"status":"published","title":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all...","description":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00475,"percentile":0.41323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-345"],"published":"2019-06-04T21:35:03Z","modified":"2026-06-17T02:37:53Z","products":[{"vendor":"fortinet","product":"fortinet fortios"},{"vendor":"fortinet","product":"fortios"}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-017","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108628","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5587"},{"url":"https://github.com/advisories/GHSA-vh73-v9g2-4q7c"}],"sources":{"cve":[{"id":"CVE-2019-5587","description":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.","status":"published","published":"2019-06-04T21:35:03Z","modified":"2024-10-25T14:06:29.918Z","updated_at":"2026-11-02T14:20:18.411291Z"}],"euvd":[{"id":"EUVD-2019-15162","description":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.","status":"published","published":"2019-06-04T21:35:03Z","modified":"2024-10-25T14:06:29Z","updated_at":"2026-11-03T00:05:18.633679Z"}],"ghsa":[{"id":"GHSA-vh73-v9g2-4q7c","title":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all...","description":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.","status":"published","published":"2022-05-24T22:00:05Z","modified":"2023-01-30T05:03:55Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-20","CWE-345"],"updated_at":"2026-11-02T14:46:56.128795Z"}],"nvd":[{"id":"CVE-2019-5587","description":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.","status":"published","published":"2019-06-04T22:29:00.377Z","modified":"2026-06-17T02:37:53.733Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:05:16.285679Z"}]}}