Privilege escalation

2024-02-1514:15:00

PRIOn knowledge base

www.prio-n.com

forticlientems

privilege management

super admin

global operations

crafted requests

http

https

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.5%

JSON

An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.

CPENameOperatorVersion
forticlient_enterprise_management_serverlt7.0.10
forticlient_enterprise_management_serverge7.2.0
forticlient_enterprise_management_serverle7.2.2