VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Jan 23, 2020· Updated Jun 17, 2026

CVE-2019-15707

CVE-2019-15707

Description

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.

Affected products

3
  • Fortinet/Fortimail3 versions
    cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: <=5.4.10
    • cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.