Lucene search

K
fortinetFortiGuard LabsFG-IR-21-094
HistoryAug 03, 2021 - 12:00 a.m.

FortiPortal - Use of a predictable salt and digest-based algorithm for password hashing

2021-08-0300:00:00
FortiGuard Labs
www.fortiguard.com
10

0.002 Low

EPSS

Percentile

53.8%

A use of one-way hash with a predictable salt (CWE-760) vulnerability in the password storing mechanism of FortiPortal may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables.

0.002 Low

EPSS

Percentile

53.8%

Related for FG-IR-21-094