Improper access control

2020-01-2318:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.

CPENameOperatorVersion
fortimailge6.0.0
fortimaille6.0.6
fortimaileq6.2.0
fortimaille5.4.10

Name	Operator	Version
fortimail	ge	6.0.0
fortimail	le	6.0.6
fortimail	eq	6.2.0
fortimail	le	5.4.10

References

fortiguard.com/advisory/FG-IR-19-237