CVE-2021-22129 — Fortinet / Fortinet FortiMail

CVE-2021-22129

Fortinet / Fortinet FortiMail PUBLISHED

Description (CNA)

Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiMail	affected FortiMail before 6.4.5

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-023

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-023

CISA-ADP

No English description supplied.

No references supplied.