Product
A weak password recovery mechanism in Fortinet FortiMail allows unauthenticated attackers to perform account takeovers of IBE webmail users via specially crafted HTTP requests.