FortiMail - Administrative authentication bypass

An improper authentication vulnerability [CWE-287] in FortiMail may allow a remote attacker to efficiently guess one administrative account’s authentication token by means of the observation of certain system’s properties.