Description
A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.2, FortiAnalyzer Cloud 7.2.1 through 7.2.6, FortiAnalyzer Cloud 7.0 all versions, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalate privilege via specific shell commands
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAnalyzer Cloud | 7.4.1 – ≤ 7.4.2, 7.2.1 – ≤ 7.2.6, 7.0.1 – ≤ 7.0.16, 6.4.1 – ≤ 6.4.7 | — |
| Fortinet | FortiManager | 7.4.0 – ≤ 7.4.2, 7.2.0 – ≤ 7.2.5, 7.0.0 – ≤ 7.0.16, 6.4.0 – ≤ 6.4.15 | — |
| Fortinet | FortiAnalyzer | 7.4.0 – ≤ 7.4.3, 7.2.0 – ≤ 7.2.5, 7.0.0 – ≤ 7.0.16, 6.4.0 – ≤ 6.4.15 | — |
Advisories 1
- WID-SEC-2025-0096 Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 14, 2025