description: An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface.
problem types: Improper Access Control
affected:
{
product: FortiMail
vendor: Fortinet
versions:
status: affected, version: 5.4.10
status: affected, version: 6.0.7
status: affected, version: 6.2.2 and earlier
}
{
product: FortiVoiceEnterprise
vendor: Fortinet
versions:
status: affected, version: 6.0.0
status: affected, version: 6.0.1
}
