CVE-2021-26090 — Fortinet / Fortinet FortiMail

CVE-2021-26090

Fortinet / Fortinet FortiMail PUBLISHED

Description (CNA)

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiMail	affected FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-042

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-042

CISA-ADP

No English description supplied.

No references supplied.