Lucene search
HistoryApr 14, 2015 - 6:59 p.m.
CVE-2015-3293
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.001
Percentile
29.8%
FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the “diag debug application httpd” command.
Affected configurations
Node
fortinetfortimailMatch5.0.3
ORfortinetfortimailMatch5.0.4
ORfortinetfortimailMatch5.0.5
ORfortinetfortimailMatch5.0.6
ORfortinetfortimailMatch5.0.7
ORfortinetfortimailMatch5.1
ORfortinetfortimailMatch5.1.1
ORfortinetfortimailMatch5.1.2
ORfortinetfortimailMatch5.1.3
ORfortinetfortimailMatch5.1.4
ORfortinetfortimailMatch5.2
ORfortinetfortimailMatch5.2.1
ORfortinetfortimailMatch5.2.2
ORfortinetfortimailMatch5.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortinet | fortimail | 5.0.3 | cpe:2.3:a:fortinet:fortimail:5.0.3:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.4 | cpe:2.3:a:fortinet:fortimail:5.0.4:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.5 | cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.6 | cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.7 | cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1 | cpe:2.3:a:fortinet:fortimail:5.1:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.1 | cpe:2.3:a:fortinet:fortimail:5.1.1:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.2 | cpe:2.3:a:fortinet:fortimail:5.1.2:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.3 | cpe:2.3:a:fortinet:fortimail:5.1.3:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.4 | cpe:2.3:a:fortinet:fortimail:5.1.4:*:*:*:*:*:*:* |
Related
nessus
nessus
Fortinet FortiMail < 5.0.9 / 5.1.6 / 5.2.4 HTTP Debug Information Disclosure
2015-04-22 00:00:00
cve
cve
CVE-2015-3293
2015-04-14 18:59:07
prion
prion
Command injection
2015-04-14 18:59:00
fortinet
fortinet
Http debug commands in FortiMail exposes users credentials to admins
2015-04-10 00:00:00
cvelist
cvelist
CVE-2015-3293
2015-04-14 18:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.001
Percentile
29.8%
Related for NVD:CVE-2015-3293