A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 7.4.4Upgrade FortiAnalyzer to 7.6.2 | Feb 6, 2025 | Jan 14, 2025 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 7.4.4Upgrade FortiManager to 7.6.2 | Feb 6, 2025 | Jan 14, 2025 |
| Fortios | — | Upgrade FortiOS to 7.0.16Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.4.5Upgrade FortiOS to 7.2.9 | Feb 6, 2025 | Jan 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub