Lucene search
FortiGuard LabsFG-IR-22-066HistoryNov 01, 2022 - 12:00 a.m.
FortiMail - Inter-domain information leakage
2022-11-0100:00:00
FortiGuard Labs
www.fortiguard.com
15
fortimail
inter-domain information leakage
access control
cwe-284
idor
EPSS
0.001
Percentile
28.4%
An improper access control vulnerability [CWE-284] in FortiMail may allow an authenticated admin user assigned to a specific domain to access and modify other domains information via insecure direct object references (IDOR).
Related
cvelist
cvelist
CVE-2022-39945
2022-11-02 00:00:00
nvd
nvd
CVE-2022-39945
2022-11-02 12:15:54
prion
prion
Improper access control
2022-11-02 12:15:00
cve
cve
CVE-2022-39945
2022-11-02 12:15:54