Fortinet FortiAnalyzer Data Forgery Issue Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat (Fortinet). The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report, archive operations. Fortinet FortiAnalyzer suffers from a data forgery issue vulnerability that stems from insufficient data authenticity verification. An unauthenticated, remote attacker could use this vulnerability to send a message to FortiAnalyzer’s syslog server via knowledge of the serial number of an authorized device.