Description (CNA)
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiMail | affected 5.4.10; affected 6.0.7; affected 6.2.2 and earlier |
| Fortinet / FortiVoiceEnterprise | affected 6.0.0; affected 6.0.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.