Cryptographic Vulnerability in FortiMail by Fortinet
CVE-2021-26100

5.9MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortinet Fortimail
Vendor
CVE Published:
9 July 2021

Summary

A flaw in the Identity-Based Encryption service of FortiMail allows unauthorized attackers to intercept and manipulate encrypted messages, compromising their integrity. This enables attackers to alter the contents and potentially recover the plaintext, posing significant security risks for users relying on the confidentiality of their communications.

Affected Version(s)

Fortinet FortiMail FortiMail before 7.0.0

References

https://fortiguard.com/advisory/FG-IR-21-003
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.