CVE-2019-15712

2020-01-2317:40:40

fortinet

www.cve.org

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

JSON

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.

CNA Affected

[
  {
    "product": "Fortinet FortiMail",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiMail 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-19-237