CVE-2021-36171

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...

CVE-2021-36171

CVE-2021-36171 affects Fortinet FortiPortal prior to 6.0.6, where the password-reset feature uses a cryptographically weak pseudo‑random number generator. This may let a remote unauthenticated attacker predict parts of or the entire newly generated password within a time window. Documented CVSSv3...

CVE-2021-36171

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...