A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 7.2.5Upgrade FortiAnalyzer to 7.4.2Upgrade FortiAnalyzer to 7.0.11 | Aug 26, 2024 | Aug 13, 2024 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 7.4.2Upgrade FortiManager to 7.2.5Upgrade FortiManager to 7.0.11 | Aug 29, 2024 | Aug 13, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub