Description
A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalation of privilege via specific shell commands
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiManager Cloud | 7.4.1 – ≤ 7.4.3, 7.2.1 – ≤ 7.2.6, 7.0.1 – ≤ 7.0.13 | — |
| Fortinet | FortiManager | 7.4.0 – ≤ 7.4.3, 7.2.0 – ≤ 7.2.5, 7.0.0 – ≤ 7.0.16, 6.4.0 – ≤ 6.4.15 | — |
Advisories 2
- NCSC-2025-0018 Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy NCSC-NL (Netherlands) · Jan 15, 2025
- WID-SEC-2025-0096 Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 14, 2025