1.7
Faible
CVE-2024-21754 A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3…
Description
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged attacker with super-admin profile and CLI access to decrypting the backup file.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiProxy 7.4 | 7.4.0 → 7.4.2 | Pas de correctif indiqué |
| FortiProxy 7.2 | 7.2.0 → 7.2.10 | Pas de correctif indiqué |
| FortiProxy 7.0 | 7.0.0 → 7.0.17 | Pas de correctif indiqué |
| FortiProxy 2.0 | 2.0.0 → 2.0.14 | Pas de correctif indiqué |
| FortiOS 7.4 | 7.4.0 → 7.4.3 | Pas de correctif indiqué |
| FortiOS 7.2 | 7.2.0 → 7.2.8 | Pas de correctif indiqué |
| FortiOS 7.0 | 7.0.0 → 7.0.15 | Pas de correctif indiqué |
| FortiOS 6.4 | 6.4.0 → 6.4.15 | Pas de correctif indiqué |
Autres CVE de FortiProxy
Les 110 CVE de FortiProxy →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Faible
CVE-2026-84392
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all…
2.5
Faible
CVE-2026-84393
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…
7.3
Élevée
CVE-2026-71407
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an…
5.1
Moyenne