Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-36633

An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests.

Published

2023-11-14T18:15:49.107

Last Modified

2024-11-21T08:10:08.090

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-285
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortimail < 7.0.6 Yes
Application fortinet fortimail < 7.2.3 Yes
References