CVE-2023-36556

Name of the Vulnerable Software and Affected Versions FortiMail webmail versions 6.4.6 and earlier FortiMail webmail versions 7.0.0 through 7.0.5 FortiMail webmail versions 7.2.0 through 7.2.2

Description An incorrect authorization issue allows an authenticated attacker to login to other users' accounts from the same web domain via crafted HTTP or HTTPS requests.

Recommendations For FortiMail webmail versions 6.4.6 and earlier, update to a version above 6.4.6 to resolve the issue. For FortiMail webmail versions 7.0.0 through 7.0.5, update to a version above 7.0.5 to resolve the issue. For FortiMail webmail versions 7.2.0 through 7.2.2, update to a version above 7.2.2 to resolve the issue.