{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6ECDB5E-50A7-4E63-9F38-A7C58EF06C3F",
              "versionEndExcluding": "6.4.5",
              "versionStartIncluding": "6.2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset their credentials."
    },
    {
      "lang": "es",
      "value": "El uso de una vulnerabilidad de generador de n\u00fameros pseudoaleatorios criptogr\u00e1ficamente d\u00e9bil en el autenticador del servicio de cifrado basado en identidad de FortiMail 6.4.0 a 6.4.4 y 6.2.0 a 6.2.7 puede permitir que un atacante no autenticado infiera partes de los tokens de autenticaci\u00f3n de los usuarios y restablezca sus credenciales."
    }
  ],
  "id": "CVE-2021-26091",
  "lastModified": "2025-07-23T15:53:04.907",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "psirt@fortinet.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-03-24T16:15:16.450",
  "references": [
    {
      "source": "psirt@fortinet.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://fortiguard.com/advisory/FG-IR-21-031"
    }
  ],
  "sourceIdentifier": "psirt@fortinet.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-338"
        }
      ],
      "source": "psirt@fortinet.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2021-26091"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-338"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-03-24T16:15:16Z",
    "severity": "HIGH"
  },
  "details": "A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset their credentials.",
  "id": "GHSA-pmxq-4hqc-9hr4",
  "modified": "2025-03-24T18:31:01Z",
  "published": "2025-03-24T18:31:01Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26091"
    },
    {
      "type": "WEB",
      "url": "https://fortiguard.com/advisory/FG-IR-21-031"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FortiSandbox versions ant\u00e9rieures \u00e0 3.2.2",
      "product": {
        "name": "FortiSandbox",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FSSO DC Agent and Collector avec FOS versions ant\u00e9rieures \u00e0 6.4.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAP-S versions 6.4.x ant\u00e9rieures \u00e0 6.4.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiMail versions 5.4.x (Fortinet n\u0027indique pas si un correctif sera disponible pour les vuln\u00e9rabilit\u00e9s CVE-2021-24007, CVE-2021-22129, CVE-2021-24013 et CVE-2021-24015)",
      "product": {
        "name": "FortiMail",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiManager versions ant\u00e9rieures \u00e0 6.2.8",
      "product": {
        "name": "FortiManager",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FSSO DC Agent and Collector avec FOS versions 7.0.x ant\u00e9rieures \u00e0 7.0.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAnalyzer versions ant\u00e9rieures \u00e0 6.2.8",
      "product": {
        "name": "FortiAnalyzer",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAP-W2 versions 6.2.x ant\u00e9rieures \u00e0 6.2.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAP-S versions 6.2.x ant\u00e9rieures \u00e0 6.2.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiManager versions 6.4.x ant\u00e9rieures \u00e0 6.4.6",
      "product": {
        "name": "FortiManager",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAP versions 6.4.x ant\u00e9rieures \u00e0 6.4.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiClient pour MacOS versions ant\u00e9rieures \u00e0 6.4.4",
      "product": {
        "name": "FortiClient",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiMail versions 6.4.x ant\u00e9rieures \u00e0 6.4.5 (Fortinet n\u0027indique pas si un correctif sera disponible pour la vuln\u00e9rabilit\u00e9 CVE-2021-26099)",
      "product": {
        "name": "FortiMail",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiMail versions 6.2.x ant\u00e9rieures \u00e0 6.2.7",
      "product": {
        "name": "FortiMail",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAnalyzer versions 6.4.x ant\u00e9rieures \u00e0 6.4.6",
      "product": {
        "name": "FortiAnalyzer",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiMail versions 6.0.x ant\u00e9rieures \u00e0 6.0.11",
      "product": {
        "name": "FortiMail",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-26095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26095"
    },
    {
      "name": "CVE-2021-24015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24015"
    },
    {
      "name": "CVE-2021-26100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26100"
    },
    {
      "name": "CVE-2021-26088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26088"
    },
    {
      "name": "CVE-2021-26106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26106"
    },
    {
      "name": "CVE-2021-24007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24007"
    },
    {
      "name": "CVE-2021-26089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26089"
    },
    {
      "name": "CVE-2021-26091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26091"
    },
    {
      "name": "CVE-2021-22129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22129"
    },
    {
      "name": "CVE-2021-24013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24013"
    },
    {
      "name": "CVE-2021-24020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24020"
    },
    {
      "name": "CVE-2021-24022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24022"
    },
    {
      "name": "CVE-2021-22125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22125"
    },
    {
      "name": "CVE-2021-26099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26099"
    },
    {
      "name": "CVE-2021-26090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26090"
    }
  ],
  "initial_release_date": "2021-07-08T00:00:00",
  "last_revision_date": "2021-07-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2021-AVI-510",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-07-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nFortinet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-244 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-20-244"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-194 du 30 juin 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-20-194"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-191 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-20-191"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-027 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-027"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-042 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-042"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-022 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-022"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-003 du 02 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-003"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-023 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-023"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-012 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-012"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-019 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-019"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-031 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-031"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-005 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-005"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-021 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-021"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-014 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-21-014"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-210 du 07 juillet 2021",
      "url": "https://www.fortiguard.com/psirt/FG-IR-20-210"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2021-26091",
    "id": "GSD-2021-26091"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-26091"
      ],
      "id": "GSD-2021-26091",
      "modified": "2023-12-13T01:23:33.385620Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2021-26091",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}