The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and authenticated attacker with a restricted shell to escalate their privileges to root due to incorrect permissions of some folders and executable files on the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 7.0.4Upgrade FortiAnalyzer to 6.4.8 | Jul 27, 2022 | Jul 18, 2022 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 7.0.4Upgrade FortiManager to 6.0.12Upgrade FortiManager to version 6.4.9Upgrade FortiManager to version 6.2.10 | Nov 14, 2022 | Jul 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub