CVE-2022-26115
16.02.2023, 19:15
A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortisandbox | 3.2.0 |
| fortinet | fortisandbox | 3.2.1 |
| fortinet | fortisandbox | 3.2.2 |
| fortinet | fortisandbox | 3.2.3 |
| fortinet | fortisandbox | 4.0.0 |
| fortinet | fortisandbox | 4.0.1 |
| fortinet | fortisandbox | 4.0.2 |
𝑥
= Vulnerable software versions