Design/Logic Flaw

2022-03-0118:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

JSON

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame.

CPENameOperatorVersion
fortiportalge5.1.0
fortiportalle5.1.2
fortiportalge5.0.0
fortiportalle5.0.3
fortiportalge4.2.0
fortiportalle4.2.4
fortiportalge4.1.0
fortiportalle4.1.2
fortiportalge6.0.0
fortiportallt6.0.6

Name	Operator	Version
fortiportal	ge	5.1.0
fortiportal	le	5.1.2
fortiportal	ge	5.0.0
fortiportal	le	5.0.3
fortiportal	ge	4.2.0
fortiportal	le	4.2.4
fortiportal	ge	4.1.0
fortiportal	le	4.1.2
fortiportal	ge	6.0.0
fortiportal	lt	6.0.6

Rows per page:

1-10 of 151

References

fortiguard.com/psirt/FG-IR-21-099