Fortinet FortiMail Improper Access Control Vulnerability Allowing Bypass of Admin Login

A vulnerability allowing improper access control has been identified in Fortinet FortiMail version 7.4.0. When RADIUS authentication is enabled and remote_wildcard is active, this vulnerability may allow a remote unauthenticated attacker to bypass the admin login by sending a crafted HTTP request.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the admin interface, allowing an attacker to gain administrative privileges on the FortiMail system.