Multiple Fortinet FortiMail IBE Appliances Multiple Security Vulnerabilities

Bugtraq ID:	57601
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 23 2013 12:00AM
Updated:	Jan 23 2013 12:00AM
Credit:	Benjamin Kunz Mejri
Vulnerable:
Not Vulnerable:

Multiple Fortinet FortiMail IBE Appliances Multiple Security Vulnerabilities

Multiple FortiMail IBE Appliances are prone to the following security vulnerabilities:

1. Multiple security-bypass vulnerabilities
2. Multiple HTML-injection vulnerabilities

Successfully exploiting these issues may allow attackers to bypass certain security restrictions and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Multiple Fortinet FortiMail IBE Appliances Multiple Security Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example data is available:

• /data/vulnerabilities/exploits/57601.txt

Multiple Fortinet FortiMail IBE Appliances Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Multiple Fortinet FortiMail IBE Appliances Multiple Security Vulnerabilities

References: