CVE-2023-36633

5.4MEDIUM

An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders

公開日: 11/14/2023更新日: 11/21/2024
NVDで表示MITREで表示

説明

An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests.

AI分析AIによる分析

影響を受ける製品

fortinetfortimail
fortinetfortimail

参照