Skip to content
fr Sign in
5.4 Medium

CVE-2022-39945 An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all…

Description

An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an authenticated admin user assigned to a specific domain to access and modify other domains information via insecure direct object references (IDOR).

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiMail Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiMail

The 15 CVEs of Fortinet FortiMail →
CVE-2022-26114 An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before… 5.4 Medium CVE-2021-32586 An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an… 7.7 High CVE-2021-36166 An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess… 9.8 Critical CVE-2021-43062 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version… 6.1 Medium
Track this CVE