CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@fortinet.com

Published

2025-03-18

Last modified

2026-02-26

Weaknesses

CWE-284

Affected products

• Fortimail (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-439