medium5.4
CVE-2022-39945
An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an a…
Impact
An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an authenticated admin user assigned to a specific domain to access and modify other domains information via insecure direct object references (IDOR).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimail | from 6.0.0 through 6.0.12 from 6.2.0 through 6.2.9 from 6.4.0 through 6.4.7 from 7.0.0 through 7.0.3 Version 7.2.0 |