FortiSandbox - Improper password storage mechanism

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortisandbox

password storage

computational effort

0.001 Low

EPSS

Percentile

49.0%

JSON

A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.

CPENameOperatorVersion
fortisandboxeq4.0.3
fortisandboxeq4.0.2
fortisandboxeq4.0.1
fortisandboxeq4.0.0
fortisandboxeq3.2.4
fortisandboxeq3.2.3
fortisandboxeq3.2.2
fortisandboxeq3.2.1
fortisandboxeq3.2.0

Name	Operator	Version
fortisandbox	eq	4.0.3
fortisandbox	eq	4.0.2
fortisandbox	eq	4.0.1
fortisandbox	eq	4.0.0
fortisandbox	eq	3.2.4
fortisandbox	eq	3.2.3
fortisandbox	eq	3.2.2
fortisandbox	eq	3.2.1
fortisandbox	eq	3.2.0

0.001 Low

EPSS

Percentile

49.0%

JSON

Related for FG-IR-20-220