Research · Oct 23, 2024
Critical Authentication Vulnerability Discovered in Fortinet FortiManager
A significant missing authentication vulnerability has been identified in multiple versions of Fortinet FortiManager, potentially allowing unauthorized access to critical functions.
What changed
A missing authentication vulnerability has been discovered in Fortinet FortiManager, affecting several versions of the software. This flaw could allow attackers to execute arbitrary code or commands through specially crafted requests, posing a serious risk to system integrity.
Who is affected
The vulnerability impacts a range of Fortinet FortiManager versions, potentially affecting numerous organizations relying on these products for network management.
- FortiManager 7.6.0
- FortiManager 7.4.0 through 7.4.4
- FortiManager 7.2.0 through 7.2.7
- FortiManager Cloud 6.4.1 through 6.4.7
What to do
Organizations using the affected FortiManager versions should prioritize applying the latest security updates released by Fortinet. Monitoring and reviewing access logs for unusual activity is also recommended.
- Update to the latest FortiManager version as soon as possible.
- Review and enhance security measures surrounding network management systems.
- Conduct a thorough assessment of system configurations and access controls.