CVE-2019-15712 — Fortinet Fortimail vulnerability

4 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.5%
top 32.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortimailFortinet Fortimail
Timeline
PublishedJan 23
Latest updateMay 24

Description

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶NVDfortinet/fortimail6.0.0 — 6.0.6+2
▶CVEListV5fortinet/fortinet_fortimailFortiMail 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below

🔴Vulnerability Details

2
GHSA
GHSA-wfw8-m9f8-45p8: An improper access control vulnerability in FortiMail admin webUI 6↗2022-05-24
▶
CVEList
CVE-2019-15712: An improper access control vulnerability in FortiMail admin webUI 6↗2020-01-23
▶

📋Vendor Advisories

1
Fortinet
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow admi...↗2020-01-23
▶