Fortinet FortiMail Detection Consolidation

Consolidation of Fortinet FortiMail detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

FortiMail Unauthenticated Login Bypass Scanner

This module attempts to detect instances of FortiMail vulnerable against an unauthenticated login bypass CVE-2020-9294. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FortiMail Unauthenticated...

Fortinet FortiMail and FortiVoice Entreprise Authorization Issues Vulnerability

Fortinet FortiMail and FortiVoice Entreprise are both products of the U.S. Fiat Fortinet, Inc. FortiMail is a suite of e-mail security gateway products. FortiMail is an email security gateway product that provides email security and data protection, etc. FortiVoice Entreprise is an enterprise...

CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

Authentication flaw

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

CVE-2020-9294

CVE-2020-9294 affects Fortinet FortiMail (versions 5.4.10 and earlier; 6.0.7 and earlier; 6.2.2 and earlier) and FortiVoiceEntreprise (6.0.0 and 6.0.1). The issue is an improper authentication vulnerability where a remote unauthenticated attacker can access the system as a legitimate user by subm...

Authentication bypass in FortiMail and FortiVoiceEntreprise

An improper authentication vulnerability in FortiMail and FortiVoiceEntreprise may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

PT-2020-5588 · Fortinet · Fortivoiceentreprise +1

Name of the Vulnerable Software and Affected Versions: FortiMail versions 5.4.10 and earlier, 6.0.7 and earlier, 6.2.2 and earlier FortiVoiceEntreprise versions 6.0.0 and 6.0.1 Description: The issue is related to weaknesses in the authentication procedure of the email protection system. It may...

CVE-2019-15707

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for...

CVE-2019-15712

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for...

CVE-2019-15712

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for...

CVE-2019-15707

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for...

Improper access control

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for...

Improper access control

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for...

CVE-2019-15707

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for...

CVE-2019-15707

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for...

CVE-2019-15707

CVE-2019-15707 concerns FortiMail admin webUI vulnerabilities: improper access control in FortiMail versions 6.2.0, 6.0.0–6.0.6, and 5.4.10 and earlier, enabling administrators to download system backup configurations they should not be authorized to access. Public references include Fortinet FG-...

CVE-2019-15712

FortiMail admin webUI has an improper access control vulnerability affecting versions 6.2.0, 6.0.0–6.0.6, and 5.4.10 and earlier, allowing administrators to access web console they should not be authorized for. This constitutes privilege escalation/unauthorized access to console resources. Docume...