CVE-2015-3293: Infoleak
Published Apr 14, 2015
·Updated
FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command.
Affected Software
14 affected components
Fortinet FortiMail=5.0.3
Fortinet FortiMail=5.0.4
Fortinet FortiMail=5.0.5
Fortinet FortiMail=5.0.6
Fortinet FortiMail=5.0.7
Fortinet FortiMail=5.1
Fortinet FortiMail=5.1.1
Fortinet FortiMail=5.1.2
Fortinet FortiMail=5.1.3
Fortinet FortiMail=5.1.4
Fortinet FortiMail=5.2
Fortinet FortiMail=5.2.1
Fortinet FortiMail=5.2.2
Fortinet FortiMail=5.2.3
Event History
Apr 14, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3293?
CVE-2015-3293 is considered a high severity vulnerability due to its potential to expose sensitive credentials.
2
How do I fix CVE-2015-3293?
To fix CVE-2015-3293, upgrade FortiMail versions to 5.2.4 or later, or apply the recommended patches from Fortinet.
3
What software versions are affected by CVE-2015-3293?
CVE-2015-3293 affects FortiMail versions 5.0.3 through 5.2.3.
4
What type of vulnerability is CVE-2015-3293?
CVE-2015-3293 is a remote credential disclosure vulnerability that allows attackers to access login credentials.
5
Can CVE-2015-3293 be exploited remotely?
Yes, CVE-2015-3293 can be exploited remotely by unauthorized administrators to obtain sensitive credentials.