Description
A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSIEM | 6.7.0 – ≤ 6.7.1, 6.6.0 – ≤ 6.6.3, 6.5.0 – ≤ 6.5.1, 6.4.0 – ≤ 6.4.2, 6.3.0 – ≤ 6.3.3, 6.2.0 – ≤ 6.2.1, 6.1.0 – ≤ 6.1.2, 5.4.0, 5.3.0 – ≤ 5.3.3 | — |