CVE-2021-32596

Name of the Vulnerable Software and Affected Versions FortiPortal versions 6.0.0 through 6.04

Description A use of one-way hash with a predictable salt vulnerability in the password storing mechanism may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables.

Recommendations For FortiPortal versions 6.0.0 through 6.04, consider updating to a version that uses a secure password storing mechanism with an unpredictable salt to prevent decryption of passwords by means of precomputed tables. At the moment, there is no information about a newer version that contains a fix for this vulnerability.