CVE-2021-26091 — Fortinet / FortiMail

CVE-2021-26091

Fortinet / FortiMail PUBLISHED

Description (CNA)

A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset their credentials.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiMail	affected 6.4.0 through 6.4.4; affected 6.2.0 through 6.2.9; affected 6.2.0 before 6.2.*

CWE

CWE-338

References

https://fortiguard.com/advisory/FG-IR-21-031

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.