Description
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Fortinet FortiManager
Default version status: unaffected
7.4.0affected7.2.3affected7.0.7 to ≤ 7.0.8affected6.4.12affected