Description
Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiManager | Fortinet / FortiManager | >= 6.2.0, <= 6.2.12 | affected |
| FortiManager | Fortinet / FortiManager | >= 6.4.0, <= 6.4.14 | affected |
| FortiManager | Fortinet / FortiManager | >= 7.0.0, <= 7.0.12 | affected |
| FortiManager | Fortinet / FortiManager | >= 7.2.0, <= 7.2.7 | affected |
| FortiManager | Fortinet / FortiManager | >= 7.4.0, <= 7.4.4 | affected |
| FortiManager | Fortinet / FortiManager | 7.6.0 | affected |