Research · Oct 23, 2024 · ZeroDay Catalog
Critical Authentication Vulnerability in Fortinet FortiManager
A critical missing authentication vulnerability has been identified in multiple versions of Fortinet FortiManager, allowing potential unauthorized access and execution of arbitrary commands.
What changed
Fortinet has disclosed a significant vulnerability in FortiManager, which affects several versions across its product line. The flaw is categorized as a missing authentication for critical functions, enabling attackers to execute arbitrary code or commands through specially crafted requests.
- Affected versions include FortiManager 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, and 6.2.0 through 6.2.12.
- FortiManager Cloud versions 7.4.1 through 7.4.4, 7.2.1 through 7.2.7, 7.0.1 through 7.0.12, and 6.4.1 through 6.4.7 are also affected.
Who is affected
Organizations utilizing Fortinet FortiManager for network management and security are at risk. This vulnerability could lead to unauthorized access and potential exploitation of their systems.
- Enterprises using FortiManager for centralized management of Fortinet devices.
- Service providers leveraging FortiManager Cloud for client infrastructure management.
- Organizations in sectors requiring stringent security measures, such as finance and healthcare.
What to do
It is crucial for affected organizations to assess their systems and apply the necessary updates to mitigate this vulnerability. Fortinet has likely released patches or workarounds to address the issue.
- Review and update FortiManager installations to the latest versions as recommended by Fortinet.
- Implement additional security measures to monitor and restrict access to FortiManager interfaces.
- Stay informed through Fortinet's security advisories and the National Vulnerability Database (NVD) for updates on this vulnerability.