Executive Risk Summary
"A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows an attacker to escalate privileges via specially crafted requests, potentially leading to unauthorized access and data breaches. This vulnerability poses a significant risk to the security and integrity of FortiAnalyzer systems, and immediate attention is recommended to mitigate the threat."
Operational Audit Arsenal
Manual Verification Required
This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.
Patch Impact Forecast
Moderate
Internal Work Notes
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Scope of Impact
Original NVD Description
"A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests."