CoreCVE
Back

CRITICAL

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request

Published Mar 18, 2025

Description

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.

Affected products

Remediation

Vendor solution

Please upgrade to FortiMail version 7.4.1 or above

Metrics

Weaknesses (1)

CWE-284

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner fortinet
Published Mar 18, 2025
Updated Feb 26, 2026
Reserved Nov 6, 2023
Link CVE-2023-47539
CISA Vulnrichment
Updated Mar 19, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2023-47539
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-47539