imPC@ndo IT

Tracker / CVE-2021-26090

CVE-2021-26090

Medium 5.3

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests.

Affected products and versions

fortinet fortimail · 6.2.0 → 6.2.6
fortinet fortimail · 6.4.0 → 6.4.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References