CVE-2021-26098

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about…

Medium · published August 4, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X
CVSS v4.0
Not supplied
EPSS
0.00814 · 56.6th percentile
Published
2021-08-04T13:20Z
EPSS history
Timeline
  • 04 AUG 13:20Z
    An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about…
    cvelistv5