CVE-2023-36556

An incorrect authorization vulnerability CWE-863 in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via crafted HTTP or HTTPs requests...

CVE-2023-36556

Summary of CVE-2023-36556 (Fortinet FortiMail webmail): An incorrect authorization vulnerability (CWE-863) affects FortiMail webmail, with impact described as login to other users’ accounts within the same web domain via crafted HTTP/HTTPS requests. Affected versions are FortiMail webmail 7.2.0–7...