CVE-2023-47539

Fortinet / FortiMail PUBLISHED

Description (CNA)

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiMail	affected 7.4.0

CWE

CWE-284

References

https://fortiguard.com/psirt/FG-IR-23-439

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.