An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.
2025-01-14T14:15:32.560
2025-03-19T16:03:34.753
Analyzed
CVSSv3.1: 8.1 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | fortinet | fortimanager | < 7.0.9 | Yes |
Application | fortinet | fortimanager | 6.4.12 | Yes |
Application | fortinet | fortimanager | 7.2.3 | Yes |
Application | fortinet | fortimanager | 7.4.0 | Yes |