CVE-2023-36633
5.4MEDIUMAn improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders
게시됨: 11/14/2023업데이트됨: 11/21/2024
설명
An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests.
AI 분석AI 기반
영향받는 제품
fortinetfortimail
fortinetfortimail
참조
- https://fortiguard.com/psirt/FG-IR-23-203Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-23-203Vendor Advisory