CVE-2021-26099
Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted master keys to compromise their confidentiality by observing a few invariant properties of the ciphertext.
- Score
- CVSS 3.1 4.9 Medium
- Status
- Modified - psirt@fortinet.com
- Published
- 2021-07-12
- Last modified
- 2024-10-25
Affected products
References
- https://fortiguard.com/advisory/FG-IR-20-244
