Aller au contenu
Se connecter
6.9 Moyenne

CVE-2021-26091 A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity…

Description

A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset their credentials.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiMail 6.4 6.4.0 → 6.4.4 Pas de correctif indiqué
FortiMail 6.2 6.2.0 → dernières Pas de correctif indiqué

Autres CVE de FortiMail

Les 24 CVE de FortiMail →
CVE-2025-57739 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]… 7.7 Élevée CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability 9.8 Critique CVE-2025-53681 An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]… 6.3 Moyenne CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Faible
Suivre cette CVE