Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidentiality of the encrypted secrets.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
Fortinet FortiMail 安全漏洞
Vulnerability Description
Fortinet FortiMail是美国飞塔（Fortinet）公司的一套电子邮件安全网关产品。该产品提供电子邮件安全防护和数据保护等功能。 Fortinet FortiWeb 存在安全漏洞，该漏洞源于在4.0.1之前的FortiSandbox、6.3.12之前的FortiWeb、6.2.1之前的FortiADC、7.0.1之前的FortiMail 7.0.1及更早的功能中缺失的加密步骤漏洞可能允许拥有密码存储的攻击者可利用该漏洞破坏加密秘密的机密性。
CVSS Information
N/A
Vulnerability Type
N/A