Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted master keys to compromise their confidentiality by observing a few invariant properties of the ciphertext.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortimail | Fortinet | 5.0 (including) | 7.0.0 (excluding) |