| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | ≥ 6.0.0, ≤ 6.0.11≥ 6.2.0, ≤ 6.2.9≥ 6.4.0, < 6.4.8≥ 7.0.0, < 7.0.4 | 6.4.87.0.4 |
| fortimanager | ≥ 6.0.0, ≤ 6.0.11≥ 6.2.0, ≤ 6.2.9≥ 6.4.0, < 6.4.8≥ 7.0.0, < 7.0.4 | 6.4.87.0.4 |
A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and authenticated attacker with a restricted shell to escalate their privileges to root due to incorrect permissions of some folders and executable files on the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free