← CVE Intelligence

CVE-2021-26095

Fortinet / Fortinet FortiMail PUBLISHED

Description (CNA)

The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption construction of the session cookie, may allow a remote attacker already in possession of a cookie to possibly reveal and alter or forge its content, thereby escalating privileges.

Affected (CNA)

Vendor / productVersions
Fortinet / Fortinet FortiMailaffected FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.