Weak key derivation for backup file

A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS and FortiProxy may allow a privileged attacker with super-admin profile and CLI access to decrypting the backup file.

access admin attacker backup cli computational cwe file fortios fortiproxy hash key may password privileged profile super vulnerability