FortiSIEM - Use of a Broken or Risky Cryptographic Algorithm

2023-06-1200:00:00

FortiGuard Labs

www.fortiguard.com

fortisiem

cryptographic algorithm

vulnerability

cwe-327

remote attacker

brute force

gui

outdated hashing

0.001 Low

EPSS

Percentile

47.7%

JSON

A use of a broken or risky cryptographic algorithm [CWE-327] in FortiSIEM may allow a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.

CPENameOperatorVersion
fortisiemeq6.7.1
fortisiemeq6.7.0
fortisiemeq6.6.3
fortisiemeq6.6.2
fortisiemeq6.6.1
fortisiemeq6.6.0
fortisiemeq6.5.1
fortisiemeq6.5.0
fortisiemeq6.4.2
fortisiemeq6.4.1

Name	Operator	Version
fortisiem	eq	6.7.1
fortisiem	eq	6.7.0
fortisiem	eq	6.6.3
fortisiem	eq	6.6.2
fortisiem	eq	6.6.1
fortisiem	eq	6.6.0
fortisiem	eq	6.5.1
fortisiem	eq	6.5.0
fortisiem	eq	6.4.2
fortisiem	eq	6.4.1

Rows per page:

1-10 of 251

0.001 Low

EPSS

Percentile

47.7%

JSON

Related for FG-IR-22-259