Total vulnerabilities in the database
Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted master keys to compromise their confidentiality by observing a few invariant properties of the ciphertext.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortimail | 5.0 | 7.0.0 |