A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.
References
Link | Resource |
---|---|
https://fortiguard.com/psirt/FG-IR-20-220 | Vendor Advisory |
https://fortiguard.com/psirt/FG-IR-20-220 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:53
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
References | () https://fortiguard.com/psirt/FG-IR-20-220 - Vendor Advisory |
07 Nov 2023, 03:44
Type | Values Removed | Values Added |
---|---|---|
Summary | A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords. |
Information
Published : 2023-02-16 19:15
Updated : 2024-11-21 06:53
NVD link : CVE-2022-26115
Mitre link : CVE-2022-26115
CVE.ORG link : CVE-2022-26115
JSON object : View
Products Affected
fortinet
- fortisandbox
CWE
CWE-916
Use of Password Hash With Insufficient Computational Effort