Description (CNA)
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / Fortinet FortiPortal | affected FortiPortal before 6.0.6 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.