CVE-2021-26113

Name of the Vulnerable Software and Affected Versions FortiWAN versions prior to 4.5.9

Description A use of a one-way hash with a predictable salt vulnerability in FortiWAN may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored.

Recommendations For versions prior to 4.5.9, update to version 4.5.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the password file to minimize the risk of exploitation.