| Package | Affected versions | Patched versions |
|---|---|---|
| fortisandbox | = 3.2.0= 3.2.1= 3.2.2= 3.2.3= 4.0.0= 4.0.1= 4.0.2 |
A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free