Lucene search
MitreCVE-2015-3293HistoryApr 14, 2015 - 6:59 p.m.
CVE-2015-3293
2015-04-1418:59:07
CWE-200
mitre
web.nvd.nist.gov
26
fortimail
cve-2015-3293
remote administrators
credentials
security vulnerability
nvd
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
29.8%
FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the “diag debug application httpd” command.
Affected configurations
Node
fortinetfortimailMatch5.0.3
ORfortinetfortimailMatch5.0.4
ORfortinetfortimailMatch5.0.5
ORfortinetfortimailMatch5.0.6
ORfortinetfortimailMatch5.0.7
ORfortinetfortimailMatch5.1
ORfortinetfortimailMatch5.1.1
ORfortinetfortimailMatch5.1.2
ORfortinetfortimailMatch5.1.3
ORfortinetfortimailMatch5.1.4
ORfortinetfortimailMatch5.2
ORfortinetfortimailMatch5.2.1
ORfortinetfortimailMatch5.2.2
ORfortinetfortimailMatch5.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortinet | fortimail | 5.0.3 | cpe:2.3:a:fortinet:fortimail:5.0.3:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.4 | cpe:2.3:a:fortinet:fortimail:5.0.4:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.5 | cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.6 | cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.0.7 | cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1 | cpe:2.3:a:fortinet:fortimail:5.1:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.1 | cpe:2.3:a:fortinet:fortimail:5.1.1:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.2 | cpe:2.3:a:fortinet:fortimail:5.1.2:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.3 | cpe:2.3:a:fortinet:fortimail:5.1.3:*:*:*:*:*:*:* |
| fortinet | fortimail | 5.1.4 | cpe:2.3:a:fortinet:fortimail:5.1.4:*:*:*:*:*:*:* |
Related
nessus
nessus
Fortinet FortiMail < 5.0.9 / 5.1.6 / 5.2.4 HTTP Debug Information Disclosure
2015-04-22 00:00:00
nvd
nvd
CVE-2015-3293
2015-04-14 18:59:07
prion
prion
Command injection
2015-04-14 18:59:00
fortinet
fortinet
Http debug commands in FortiMail exposes users credentials to admins
2015-04-10 00:00:00
cvelist
cvelist
CVE-2015-3293
2015-04-14 18:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
29.8%
Related for CVE-2015-3293