Fortinet FortiMail CVE-2017-3125 Unspecified Cross Site Scripting Vulnerability

Fortinet FortiMail is prone to a unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Fortinet FortiMail 5.0.0 through 5.2.9 and 5.3.0 through 5.3.8 are vulnerable.

Information

Bugtraq ID: 97474
Class: Input Validation Error
CVE: CVE-2017-3125

Remote: Yes
Local: No
Published: Apr 04 2017 12:00AM
Credit: Ebrahim Hegazy
Vulnerable: Fortinet FortiMail 5.3.8
Fortinet FortiMail 5.3
Fortinet FortiMail 5.2.9
Fortinet FortiMail 5.1.2
Fortinet FortiMail 5.0.5
Fortinet FortiMail 5.2.3
Fortinet FortiMail 5.1.5
Fortinet FortiMail 5.1.4
Fortinet FortiMail 5.1.3
Fortinet FortiMail 5.1.1
Fortinet FortiMail 5.0.8
Fortinet FortiMail 5.0.7
Fortinet FortiMail 5.0.6
Fortinet FortiMail 5.0.2
Fortinet FortiMail 5.0.1
Fortinet FortiMail 5.0.0

Not Vulnerable: Fortinet FortiMail 5.3.9

Exploit

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

References:

• FortiMail Homepage (Fortinet)
  
• FG-IR-17-011: Unauthenticated XSS (Cross Site Scripting) in FortiMail (Fortinet)
  

Source: www.securityfocus.com