high7.7
CVE-2021-32586
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the enviro…
Impact
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimail | through 5.4.12 from 6.0.0 before 6.0.12 from 6.2.0 before 6.2.8 from 6.4.0 before 6.4.6 Version 7.0.0 |