Skip to content
Sign in
5.3 Medium

CVE-2021-26098 An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in…

Description

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiSandbox Versions not published

Other CVEs of Fortinet FortiSandbox

The 12 CVEs of Fortinet FortiSandbox →
CVE-2020-29013 An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an… 5.4 Medium CVE-2021-32591 A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in… 5.3 Medium CVE-2020-29012 An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse… 5.6 Medium CVE-2020-15939 An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may… 4.3 Medium
Track this CVE