PT-2023-25622
CVE-2023-36556
·
تاريخ النشر
2023-10-10
·
تاريخ التحديث
2023-10-13
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FortiMail webmail versions 6.4.6 and earlier
FortiMail webmail versions 7.0.0 through 7.0.5
FortiMail webmail versions 7.2.0 through 7.2.2
Description
An incorrect authorization issue allows an authenticated attacker to login to other users' accounts from the same web domain via crafted HTTP or HTTPS requests.
Recommendations
For FortiMail webmail versions 6.4.6 and earlier, update to a version above 6.4.6 to resolve the issue.
For FortiMail webmail versions 7.0.0 through 7.0.5, update to a version above 7.0.5 to resolve the issue.
For FortiMail webmail versions 7.2.0 through 7.2.2, update to a version above 7.2.2 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾