The vulnerability arises from the use of a weak PRNG seeded with the current Unix timestamp in the boks_keytabmd component of Fortra BoKS Manager boks-server. This predictable password generation method allows an attacker with knowledge of the service principal and approximate password-change timing to generate and verify candidate passwords offline. This flaw affects all versions from 0 up to 9.0.0.6. The CVSS v3.1 score is 9.9, indicating critical severity with network attack vector, low attack complexity, low privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to recover Active Directory service-account passwords generated by the vulnerable PRNG, leading to potential unauthorized access and full compromise of affected systems. The vulnerability impacts confidentiality, integrity, and availability of the service accounts and associated resources.

No official patch or remediation information is provided in the vendor advisory or input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider additional compensating controls such as monitoring for unusual authentication activity and restricting knowledge of service principal details to limit attack feasibility.