Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-335q-v5r7-xq5p

Опубликовано: 16 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.

A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.

EPSS

Процентиль: 33%
0.00129
Низкий

7.5 High

CVSS3

Дефекты

CWE-916

Связанные уязвимости

CVSS3: 5.9
nvd
почти 3 года назад

A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.

EPSS

Процентиль: 33%
0.00129
Низкий

7.5 High

CVSS3

Дефекты

CWE-916