CVE-2021-24020

CRITICAL

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed...

Affects 1 product across 1 vendor.

BCS6.64
CVSS 3.19.8
EPSS0.6%
Percentile46th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-347: CWE-347
Related Attack Patterns (CAPEC)
CAPEC-463 Padding Oracle Crypto Attack
via CWE-347
CAPEC-475 Signature Spoofing by Improper Validation
via CWE-347

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

A critical vulnerability in FortiMail versions 6.4.0 through 6.4.4 and 6.2.0 through 6.2.7 allows unauthenticated attackers to tamper with signed URLs, bypassing signature verification due to a missing cryptographic step in the hash digest algorithm implementation.

BSID: BS-2021-GLOBAL-228085-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2021-24020?
A critical vulnerability in FortiMail versions 6.4.0 through 6.4.4 and 6.2.0 through 6.2.7 allows unauthenticated attackers to tamper with signed URLs, bypassing signature verification due to a missing cryptographic step in the hash digest algorithm implementation.
What is the CVSS score for CVE-2021-24020?
CVE-2021-24020 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.6%.
Is CVE-2021-24020 actively exploited?
No confirmed active exploitation of CVE-2021-24020 as of 2026-05-30.
How do I remediate CVE-2021-24020?
Priority: IMMEDIATE.
What systems are affected by CVE-2021-24020?
CVE-2021-24020 affects: Fortinet.
Vulnerability Details
CVE IDCVE-2021-24020
BSIDBS-2021-GLOBAL-228085-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2021-07-09
Last Modified2024-11-21
ICS Relevance55%
Weakness (CWE)
Domains
NETWORK-INFRA
SourceNVD
Official Description

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack vector involves an unauthenticated attacker appending additional data to signed URLs, exploiting a missing cryptographic step in the hash digest algorithm. This allows the attacker to bypass the signature verification process, potentially leading to unauthorized access or manipulation of the signed content.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductFixed Version
Fortinet Fortimail
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 1842 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashd684c561cbf1a1a9daaefa7718ef53d1546fafc75cc3075f962e784cc035860c0c7bfcf01ae4b98e480f452b1dc29bdbf7b8e44d14c992af5c30612a5f28b242
Related CVEs affecting Fortinet
CVE-2005-3057 10.0 The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and ot... CVE-2024-47575 9.8 A missing authentication for critical function in FortiManager 7.6.0, FortiMa... CVE-2024-23109 9.8 An improper neutralization of special elements used in an os command ('os com... CVE-2024-23108 9.8 An improper neutralization of special elements used in an os command ('os com... CVE-2019-16153 9.8 A hard-coded password vulnerability in the Fortinet FortiSIEM database compon...
View all Fortinet CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →