← CVE Intelligence

CVE-2021-24020

Fortinet / Fortinet FortiMail PUBLISHED

Description (CNA)

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification.

Affected (CNA)

Vendor / productVersions
Fortinet / Fortinet FortiMailaffected FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.