CVE-2021-26113

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-916

Affected software

Vendor	Product	Versions
Fortinet	Fortinet FortiWAN	FortiWAN before 4.5.9

References

https://fortiguard.com/psirt/FG-IR-21-064Vendor Advisory
https://fortiguard.com/psirt/FG-IR-21-064Vendor Advisory

Timeline

Published: Apr 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-261149.8Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenti CVE-2021-261157.8An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated a CVE-2021-261168.8An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator bef CVE-2021-261177.5The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Arte CVE-2021-261187.5While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemi CVE-2021-261197.5Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode.CVE-2021-261209.8Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.CVE-2021-261226.1LivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm.CVE-2021-261236.1LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm.CVE-2021-261946.5An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file.CVE-2021-261958.8An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file.CVE-2021-261976.5An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file.