Fortinet FortiMail/DDoS CVE-2020-15933 Information Disclosure Advisory

Key Information Vulnerability Overview Vulnerability ID: FG-IR-20-105 Release Date: November 3, 2020 Update Date: March 28, 2025 Severity: Medium CVSSv3 Score: 5.2 Impact: Information Disclosure CVE ID: CVE-2020-15933, CVE-2021-24008 Affected Products FortiMail versions 6.0.9 and earlier FortiMail versions 6.2.4 and earlier FortiMail versions 6.4.1 and earlier FortiDDoS version 5.4.0 FortiDDoS versions 5.3.2 and earlier FortiDDoS version 5.2.0 FortiDDoS version 5.1.0 FortiDDoS version 5.0.0 FortiDDoS version 4.7.0 FortiDDoS version 4.6.0 FortiDDoS version 4.5.0 FortiDDoS versions 4.4.2 and earlier FortiDDoS-CM version 5.3.0 FortiDDoS-CM version 5.2.0 FortiDDoS-CM version 5.1.0 FortiDDoS-CM version 5.0.0 FortiDDoS-CM version 4.7.0 FortiVoice versions 6.0.6 and earlier FortiRecorder versions 6.0.3 and earlier Remediation Upgrade to FortiMail version 6.0.10 or later Upgrade to FortiMail version 6.2.5 or later Upgrade to FortiMail version 6.4.2 or later Upgrade to FortiDDoS version 5.5.0 or later Upgrade to FortiDDoS version 5.4.3 or later Upgrade to FortiDDoS-CM version 5.4.1 or later Upgrade to FortiVoice version 6.4.0 or later Upgrade to FortiVoice version 6.0.7 or later Upgrade to FortiRecorder version 6.0.4 or later Acknowledgments Thanks to Patrick Schmid from Redguard for reporting this vulnerability and responsible disclosure. Timeline March 28, 2025: Affected products updated

Goal Reached Thanks to every supporter — we hit 100%!

Fortinet FortiMail/DDoS CVE-2020-15933 Information Disclosure Advisory