Lucene search
+L

96 matches found

NVD
NVD
•added 2022/04/06 4:15 p.m.•34 views

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

7.5CVSS0.00414EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/04/06 4:15 p.m.•18 views

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

7.5CVSS7.1AI score0.00414EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/06 4:15 p.m.•13 views

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

7.5CVSS7.3AI score0.00414EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/04/06 4:15 p.m.•30 views

Default credentials

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

5CVSS7.5AI score0.00414EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/06 4:00 p.m.•44 views

CVE-2021-26113

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

6.2CVSS7.7AI score0.00414EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/06 4:00 p.m.•96 views

CVE-2021-26113

CVE-2021-26113 affects Fortinet FortiWAN prior to 4.5.9. The issue is a vulnerability in the password hashing process: a one‑way hash is used with a predictable salt (CWE-760). If an attacker has obtained the password file, they may be able to guess stored passwords. No exploitation details are p...

7.5CVSS7.5AI score0.00414EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/06 12:00 a.m.•7 views

PT-2022-9715

Name of the Vulnerable Software and Affected Versions FortiWAN versions prior to 4.5.9 Description A use of a one-way hash with a predictable salt vulnerability in FortiWAN may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein...

7.5CVSS5.8AI score0.00414EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/06 12:00 a.m.•7 views

CVE-2021-26113: Use of Password Hash With Insufficient Computational Effort

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

7.5CVSS7.2AI score0.00414EPSS
SaveExploits0References2
Fortinet
Fortinet
•added 2022/04/05 12:00 a.m.•66 views

FortiWAN - Use of hardcoded salt for password hashing

A use of a one-way hash with a predictable salt vulnerability CWE-760 in FortiWAN may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored...

5CVSS7.4AI score0.00414EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
•added 2021/12/07 3:39 p.m.•929 views

Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework

CVE-2021-38314 Python Exploit Detail The Gutenberg Templat...

5.3CVSS5.3AI score0.28961EPSS
SaveExploits6
NVD
NVD
•added 2021/08/04 4:15 p.m.•32 views

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

7.5CVSS0.00427EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/08/04 4:15 p.m.•17 views

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

7.5CVSS5.8AI score0.00427EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/04 4:15 p.m.•8 views

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

7.5CVSS7AI score0.00427EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2021/08/04 3:35 p.m.•25 views

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

6CVSS6.9AI score0.00427EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/04 3:35 p.m.•83 views

CVE-2021-32596

CVE-2021-32596 affects FortiPortal 6.0.0 through 6.04, where a vulnerable password store uses a one-way hash with a predictable salt, enabling an attacker with access to the password store to decrypt passwords via precomputed tables. The connected sources (Fortinet advisory FG-IR-21-094 and relat...

7.5CVSS7.5AI score0.00427EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/04 12:00 a.m.•5 views

PT-2021-19800

Name of the Vulnerable Software and Affected Versions FortiPortal versions 6.0.0 through 6.04 Description A use of one-way hash with a predictable salt vulnerability in the password storing mechanism may allow an attacker already in possession of the password store to decrypt the passwords by mea...

7.5CVSS5.8AI score0.00427EPSS
SaveExploits0References5
Fortinet
Fortinet
•added 2021/08/03 12:00 a.m.•67 views

FortiPortal - Use of a predictable salt and digest-based algorithm for password hashing

A use of one-way hash with a predictable salt CWE-760 vulnerability in the password storing mechanism of FortiPortal may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

5CVSS7.4AI score0.00427EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2020/12/11 1:15 a.m.•36 views

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

9.8CVSS6AI score0.00734EPSS
SaveExploits0References2
CVE
CVE
•added 2020/12/11 12:51 a.m.•119 views

CVE-2020-28214

The Schneider Electric Modicon M221 programmable logic controller (all versions) is affected by CVE-2020-28214 . The vulnerability involves the Use of a One-Way Hash with a Predictable Salt (CWE-760), which can be exploited by an attacker to pre-compute hash values using dictionary attack techniq...

9.8CVSS5.4AI score0.00734EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/12/11 12:51 a.m.•50 views

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

5.4AI score0.00734EPSS
SaveExploits0References2
Rows per page
Query Builder