Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-26090 EUVD-2021-12911GHSA-j48p-m2m2-h4m7

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.…

Published Jul 12, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiMail FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 —

References