CVE-2020-9294: Critical severity fortinet fortimail-200d vulnerability
Published Apr 27, 2020
·Updated
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface.
Affected Software
5 affected components
Fortinet FortiMail<=5.4.10
Fortinet FortiMail>=6.0.0<=6.0.7
Fortinet FortiMail>=6.2.0<=6.2.2
Fortinet FortiVoice>=6.0.0<=6.0.1
Fortinet FortiVoice>=6.0.0<=6.0.1
Event History
Apr 27, 2020
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-9294?
CVE-2020-9294 is an improper authentication vulnerability in FortiMail and FortiVoiceEntreprise.
2
How does CVE-2020-9294 affect FortiMail and FortiVoiceEntreprise?
CVE-2020-9294 allows a remote unauthenticated attacker to access the system as a legitimate user.
3
Which versions of FortiMail are affected by CVE-2020-9294?
FortiMail versions 5.4.10, 6.0.7, and 6.2.2 and earlier are affected by CVE-2020-9294.
4
Which versions of FortiVoiceEntreprise are affected by CVE-2020-9294?
FortiVoiceEntreprise versions 6.0.0 and 6.0.1 are affected by CVE-2020-9294.
5
What is the severity of CVE-2020-9294?
CVE-2020-9294 has a severity rating of 9.8 (Critical).