CVE-2019-15707

2020-01-2317:47:00

fortinet

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.

CNA Affected

[
  {
    "product": "Fortinet FortiMail",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiMail 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-19-237