A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.
References
Link | Resource |
---|---|
https://fortiguard.com/psirt/FG-IR-20-220 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:44
Type | Values Removed | Values Added |
---|---|---|
Summary | A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords. |
Information
Published : 2023-02-16 19:15
Updated : 2024-02-28 19:51
NVD link : CVE-2022-26115
Mitre link : CVE-2022-26115
CVE.ORG link : CVE-2022-26115
JSON object : View
Products Affected
fortinet
- fortisandbox
CWE
CWE-916
Use of Password Hash With Insufficient Computational Effort