PT-2021-3855
CVE-2021-24015
·
Published
2021-06-16
·
Updated
2021-07-14
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FortiMail versions prior to 6.4.4
Description
The issue is related to the improper neutralization of special elements used in an OS command in the administrative interface of FortiMail. This could allow a remote attacker to execute arbitrary commands by sending specially crafted HTTP requests.
Recommendations
For versions prior to 6.4.4, update to version 6.4.4 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾