> Capacity to use password hashes instead of password for authentication

[SOURCE] Fortinet FortiGuard [DATE: 09/12/2025 08:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 4.4

 A use of password hash instead of password for authentication vulnerability [CWE-836] in FortiWeb may allow an unauthenticated attacker to use the hash in place of the password to authenticate via crafted HTTP/HTTPS requests.

  Revised on 2025-12-09 00:00:00

[messages.read_original_source] →