CVE-2021-24020

HIGH · CVSS 7.5 EPSS 0.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-07-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24020

Severity

HIGH

CVSS

7.5

EPSS

0.62%

Original NVD Description

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification.