Lucene search
FortiGuard LabsFG-IR-21-126HistoryFeb 16, 2023 - 12:00 a.m.
Protect
2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
39
cryptographic signature verification
fortios
fortiweb
fortiproxy
fortiswitch
administrative session management
intercept
EPSS
0.001
Percentile
23.5%
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiOS, FortiWeb, FortiProxy and FortiSwitch may allow an attacker to decrypt portions of the administrative session management cookie if able to intercept the latter.
Related
nessus
nessus
Fortinet Fortigate - Padding oracle in cookie encryption (FG-IR-21-126)
2023-02-24 00:00:00
Fortinet FortiWeb - Padding oracle in cookie encryption (FG-IR-21-126)
2023-02-24 00:00:00
cvelist
cvelist
CVE-2021-43074
2023-02-16 18:05:27
nvd
nvd
CVE-2021-43074
2023-02-16 19:15:11
prion
prion
Information disclosure
2023-02-16 19:15:00
cve
cve
CVE-2021-43074
2023-02-16 19:15:11