High · 8.8 CVE-2021-24013 EUVD-2021-10933GHSA-43fc-qcr8-6g6r

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to …

Published Jul 12, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiMail	FortiMail before 6.4.4	—

References

https://fortiguard.com/advisory/FG-IR-21-014