Improper access control

2020-01-2318:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

JSON

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.

CPENameOperatorVersion
fortimailge6.0.0
fortimaille6.0.6
fortimaileq6.2.0
fortimaille5.4.10

Name	Operator	Version
fortimail	ge	6.0.0
fortimail	le	6.0.6
fortimail	eq	6.2.0
fortimail	le	5.4.10

References

fortiguard.com/advisory/FG-IR-19-237