FortiMail admin privilege escalation through improper user profile control

2020-01-0300:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

36.9%

JSON

Two improper access control vulnerabilities in FortiMail admin webUI may allow administrators to perform privileged functions they should not be authorized for.

CPENameOperatorVersion
fortimaileq6.2.1
fortimaileq6.2.0
fortimaileq6.0.7
fortimaileq6.0.6
fortimaileq6.0.5
fortimaileq6.0.4
fortimaileq6.0.3
fortimaileq6.0.2
fortimaileq6.0.1
fortimaileq6.0.0

Name	Operator	Version
fortimail	eq	6.2.1
fortimail	eq	6.2.0
fortimail	eq	6.0.7
fortimail	eq	6.0.6
fortimail	eq	6.0.5
fortimail	eq	6.0.4
fortimail	eq	6.0.3
fortimail	eq	6.0.2
fortimail	eq	6.0.1
fortimail	eq	6.0.0

Rows per page:

1-10 of 211

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for FG-IR-19-237