CVE-2021-32591 Weak cryptography in Fortinet FortiSandbox
An attacker with access to the password store can decrypt LDAP and RADIUS credentials due to missing cryptographic steps in Fortinet products.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-32591?
CVE-2021-32591 is a medium-severity vulnerability in Fortinet Fortisandbox, published on 8 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidentiality of the encrypted secrets.
Which versions are affected by CVE-2021-32591?
It affects 4 products.
Products include Fortinet Fortiadc, Fortinet Fortimail, Fortinet Fortisandbox, Fortinet Fortiweb.
How do I fix CVE-2021-32591?
No fix has been published for CVE-2021-32591 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-32591 being exploited?
There is no known exploitation of CVE-2021-32591 in the wild and no public exploit code.
Other vulnerabilities in Fortinet Fortisandbox
Sources
Also known as GHSA-8qc7-q2w2-p7f4.