Description
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
E
High
RL
Unchanged
RC
Changed
Affected products
- fortinet / fortimanager7.6.0 – 7.6.0
- fortinet / fortimanager7.4.4 – 7.4.4
- fortinet / fortimanager7.4.3 – 7.4.3
- fortinet / fortimanager7.4.2 – 7.4.2
- fortinet / fortimanager7.4.1 – 7.4.1
- fortinet / fortimanager7.4.0 – 7.4.0
- fortinet / fortimanager7.2.7 – 7.2.7
- fortinet / fortimanager7.2.6 – 7.2.6
- fortinet / fortimanager7.2.5 – 7.2.5
- fortinet / fortimanager7.2.4 – 7.2.4
- fortinet / fortimanager7.2.3 – 7.2.3
- fortinet / fortimanager7.2.2 – 7.2.2
- fortinet / fortimanager7.2.1 – 7.2.1
- fortinet / fortimanager7.2.0 – 7.2.0
- fortinet / fortimanager7.0.12 – 7.0.12
- fortinet / fortimanager7.0.11 – 7.0.11
- fortinet / fortimanager7.0.10 – 7.0.10
- fortinet / fortimanager7.0.9 – 7.0.9
- fortinet / fortimanager7.0.8 – 7.0.8
- fortinet / fortimanager7.0.7 – 7.0.7
- fortinet / fortimanager7.0.6 – 7.0.6
- fortinet / fortimanager7.0.5 – 7.0.5
- fortinet / fortimanager7.0.4 – 7.0.4
- fortinet / fortimanager7.0.3 – 7.0.3
- fortinet / fortimanager7.0.2 – 7.0.2
- fortinet / fortimanager7.0.1 – 7.0.1
- fortinet / fortimanager7.0.0 – 7.0.0
- fortinet / fortimanager6.4.14 – 6.4.14
- fortinet / fortimanager6.4.13 – 6.4.13
- fortinet / fortimanager6.4.12 – 6.4.12
- fortinet / fortimanager6.4.11 – 6.4.11
- fortinet / fortimanager6.4.10 – 6.4.10
- fortinet / fortimanager6.4.9 – 6.4.9
- fortinet / fortimanager6.4.8 – 6.4.8
- fortinet / fortimanager6.4.7 – 6.4.7
- fortinet / fortimanager6.4.6 – 6.4.6
- fortinet / fortimanager6.4.5 – 6.4.5
- fortinet / fortimanager6.4.4 – 6.4.4
- fortinet / fortimanager6.4.3 – 6.4.3
- fortinet / fortimanager6.4.2 – 6.4.2
- fortinet / fortimanager6.4.1 – 6.4.1
- fortinet / fortimanager6.4.0 – 6.4.0
- fortinet / fortimanager6.2.12 – 6.2.12
- fortinet / fortimanager6.2.11 – 6.2.11
- fortinet / fortimanager6.2.10 – 6.2.10
- fortinet / fortimanager6.2.9 – 6.2.9
- fortinet / fortimanager6.2.8 – 6.2.8
- fortinet / fortimanager6.2.7 – 6.2.7
- fortinet / fortimanager6.2.6 – 6.2.6
- fortinet / fortimanager6.2.5 – 6.2.5
- fortinet / fortimanager6.2.4 – 6.2.4
- fortinet / fortimanager6.2.3 – 6.2.3
- fortinet / fortimanager6.2.2 – 6.2.2
- fortinet / fortimanager6.2.1 – 6.2.1
- fortinet / fortimanager6.2.0 – 6.2.0
Exploits & PoCs
- nucleiFortiManager Unauthenticated Remote Code Executionby 0x_Akoko,pussycat0x,watchTowr
References
- VENDOR_ADVISORYhttps://fortiguard.fortinet.com/psirt/FG-IR-24-423