Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-26098 EUVD-2021-12919GHSA-6g87-jg5m-ppfq

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few inform…

Published Aug 4, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSandbox Category: Network devices

Description

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSandbox FortiSandbox before 4.0.0 —

References