Design/Logic Flaw

2023-06-1309:15:00

PRIOn knowledge base

www.prio-n.com

design logic flaw

broken cryptographic algorithm

fortinet fortisiem

remote unauthenticated

brute force attacks

gui endpoints

outdated hashing

0.001 Low

EPSS

Percentile

47.7%

JSON

A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.

CPENameOperatorVersion
fortisiemeq6.4.1
fortisiemeq6.4.0
fortisiemge6.3.0
fortisiemle6.3.3
fortisiemeq6.2.1
fortisiemeq6.2.0
fortisiemeq5.4.0
fortisiemge5.3.0
fortisiemle5.3.3
fortisiemeq6.7.0

Name	Operator	Version
fortisiem	eq	6.4.1
fortisiem	eq	6.4.0
fortisiem	ge	6.3.0
fortisiem	le	6.3.3
fortisiem	eq	6.2.1
fortisiem	eq	6.2.0
fortisiem	eq	5.4.0
fortisiem	ge	5.3.0
fortisiem	le	5.3.3
fortisiem	eq	6.7.0

Rows per page:

1-10 of 191

References

fortiguard.com/psirt/FG-IR-22-259

0.001 Low

EPSS

Percentile

47.7%

JSON

Related for PRION:CVE-2022-43949