Executive Risk Summary
"A missing authorization vulnerability in Fortinet FortiAuthenticator may allow a read-only user to make modifications to local users via a file upload to an unprotected endpoint, potentially leading to unauthorized access and data breaches. This vulnerability affects FortiAuthenticator versions 6.6.0 through 6.6.6, 6.5, 6.4, and 6.3."
Operational Audit Arsenal
Manual Verification Required
This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.
Patch Impact Forecast
Moderate, may cause temporary authentication service disruption
Internal Work Notes
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Scope of Impact
Original NVD Description
"A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint."