CVE-2021-26095
EUVD-2021-1291620.07.2021, 11:15
The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption construction of the session cookie, may allow a remote attacker already in possession of a cookie to possibly reveal and alter or forge its content, thereby escalating privileges.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortimail | 6.2.0 ≤ 𝑥 ≤ 6.2.6 |
| fortinet | fortimail | 6.4.0 ≤ 𝑥 < 6.4.5 |
𝑥
= Vulnerable software versions