| IR Number | FG-IR-21-014 |
| Date | Jul 7, 2021 |
| Severity |
High |
| CVSSv3 Score | 8.3 |
| Impact | Unauthorized access to files. |
| CVE ID | CVE-2021-24013 |
| Affected Products |
FortiMail
:
6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.11, 6.0.10, 6.0.1, 6.0.0, 5.4.9, 5.4.8, 5.4.7, 5.4.6, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.12, 5.4.11, 5.4.10, 5.4.1, 5.4.0, 5.3.9, 5.3.8, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.13, 5.3.12, 5.3.10, 5.3.1, 5.3.0, 5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.10, 5.2.1, 5.2.0, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.9, 5.0.8, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.11, 5.0.10, 5.0.1, 5.0.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiMail - path traversal vulnerabilities
Summary
Multiple Path traversal vulnerabilities in FortiMail Webmail may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.
Affected Products
FortiMail 6.4.4 and below.
FortiMail 6.2.6 and below.
FortiMail 6.0.10 and below.
FortiMail 5.4.12 and below.
Solutions
Upgrade to FortiMail 7.0.0.
Upgrade to FortiMail 6.4.5.
Upgrade to FortiMail 6.2.7.
Upgrade to FortiMail 6.0.11.
Fix for version 5.4 to be confirmed.