Lucene search
FortinetCVELIST:CVE-2021-24013HistoryJul 12, 2021 - 1:30 p.m.
CVE-2021-24013
2021-07-1213:30:55
fortinet
www.cve.org
4
fortimail
path traversal
web requests
unauthorized access
data files
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
39.7%
Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.
CNA Affected
[
{
"product": "Fortinet FortiMail",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiMail before 6.4.4"
}
]
}
]References
Related
fortinet
fortinet
FortiMail / FortiNDR / FortiWeb - Path traversal vulnerabilities
2021-07-07 00:00:00
nvd
nvd
CVE-2021-24013
2021-07-12 14:15:07
prion
prion
Path traversal
2021-07-12 14:15:00
cve
cve
CVE-2021-24013
2021-07-12 14:15:07
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
39.7%
Related for CVELIST:CVE-2021-24013