SynopsisThe remote host is running a version of FortiOS that has not yet enabled private data encryption.
DescriptionThe remote host is running a version of FortiOS that has not yet enabled private-data-encryption. A authorized remote user with access or knowledge of the standard encryption key could gain access and decrypt the FortiOS backup files and all non-administor passwords and private keys.' (CVE-2019-6693)
SolutionEnsure that Fortinet FortiOS has been updated to 5.6.10, 6.0.7, 6.2.1, or later.
Additionally the user will need to set the private-data-encryption attribute based on instructions contained in FG-IR-19-007 advisory.