CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

FortiMail RADIUS Authentication Bypass

The vulnerability of the RADIUS Remote Authentication in Dial-In User Service protocol implementation of the FortiMail email security system is related to deficiencies in access control when the Remotewildcard configuration is used. Exploiting this vulnerability allows a malicious actor to bypass...