CVE-2021-32591
- State
- Published
- Severity
- 5.3 Medium
- Published
- Dec 8, 2021
- Updated
- Oct 25, 2024
- Reserved
- May 11, 2021
Description
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidentiality of the encrypted secrets.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X | fortinet |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Fortinet FortiSandboxFortinet |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.