Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-36166 EUVD-2021-22787GHSA-6gm4-rphq-fcfx

An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative acco…

Published Mar 1, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of certain system's properties.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiMail FortiMail before 7.0.1 —

References