Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
Fortinet FortiPortal 安全漏洞
Vulnerability Description
Fortinet FortiSandbox是美国飞塔（Fortinet）公司的一款APT（高级持续性威胁）防护设备。该设备提供双重沙盒技术、动态威胁智能系统、实时控制面板和报告等功能。 Fortinet FortiPortal存在安全漏洞，该漏洞的存在是由于FortiPortal在存储密码时使用了带有可预测的salt的ne-way散列。可以访问密码散列的攻击者可利用该漏洞可以通过预先计算的表来恢复密码。该漏洞允许攻击者可利用该漏洞从密码哈希恢复密码。
CVSS Information
N/A
Vulnerability Type
N/A