Fortinet Update
2822Warning Date
Severity Level
Warning Number
Target Sector
28 April, 2020
● Critical
2020-1179
All
Description:
Fortinet has released security update to address a vulnerability in the following products:
- FortiMail
- versions 5.4.10 and below
- versions 6.0.7 and below
- versions 6.2.2 and below
- FortiVoiceEntreprise
- versions 6.0.1 and below (versions 5.3 and lower are not impacted by this vulnerability)
Threats:
Remote attacker could exploit this vulnerability by accessing the system as a legitimate user by requesting a password change via the user interface.
Best practice and Recommendations:
The CERT team encourages users to review Fortinet security advisory and apply the necessary updates: