imPC@ndo IT

Tracker / CVE-2021-32596

CVE-2021-32596

Medium 6.0

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables.

Affected products and versions

fortinet fortiportal · 6.0.0 → 6.0.4

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References