← Database

CVE-2022-39945

MEDIUM CVSS: 5.4 Published: 2022-11-02 Modified: 2026-06-17

Description

An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an authenticated admin user assigned to a specific domain to access and modify other domains information via insecure direct object references (IDOR).

Affected Platforms

Fortinet Fortimail

Weakness Type

CWE-639

References