CVEvulnerability
CVE-2019-15712
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.
Affected configurations
• fortinet fortimail (<= 5.4.10)
• fortinet fortimail (>= 6.0.0 <= 6.0.6)
• fortinet fortimail 6.2.0
References
- https://fortiguard.com/advisory/FG-IR-19-237 Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-19-237 Vendor Advisory