CVE-2019-15707

published 2020-01-23

CVE-2019-15707: An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup…

medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C H I N A N

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortimail	<= 5.4.10	—
fortinet	fortimail	—	—
fortinet	fortimail	—	—
fortinet	fortimail	6.0.0 – 6.0.6	—

CWE-20