FortiOS - Improper authentication in fgfmd

...

Arbitrary file read in administrative interface

...

Path traversal vulnerability leading to file creation

...

Path traversal vulnerability in CLI commands

...

Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager

CVE-2024-47575 Fortinet FortiManager Unauthenticated Remote Co...

The vulnerability of the software for centralized device management in Fortinet FortiManager allows a hacker to disclose protected information.

The vulnerability of the software for centralized device management in Fortinet FortiManager lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information through generated HTTP requests...

How to Mitigate the Latest API Vulnerability in FortiManager

Overview of the FortiManager API Vulnerability Recently, a critical API vulnerability in FortiManager CVE-2024-47575 was disclosed. Certain threat actors exploited it in the wild to steal sensitive information containing configurations, IP addresses, and credentials used by managed devices. In...

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability CVE-2024-47575 to include additional workarounds and indicators of compromise IOCs. A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive files or take...

Fortinet FortiManager Access Control Error Vulnerability (CNVD-2025-00408)

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575)

Fortinet and Mandiant investigated the mass exploitation of FortiManager devices via CVE-2024-47575, impacting 50+ systems across industries. Threat…...

The vulnerability of the fgfmd software for Fortinet FortiManager device centralized management allows a perpetrator to execute arbitrary code.

The vulnerability of the fgfmd software for Fortinet FortiManager device centralized management involves a lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted network requests...

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild. Tracked as CVE-2024-47575 CVSS score: 9.8, the vulnerability is also known as FortiJump and is rooted in the FortiGate to FortiManager FGFM protocol. "A missing...

PT-2024-10210

Name of the Vulnerable Software and Affected Versions Fortinet FortiManager versions 7.2.1 through 7.2.8 Fortinet FortiManager versions 7.4.0 through 7.4.5 Fortinet FortiManager versions 7.6.0 through 7.6.1 Fortinet FortiManager Cloud versions 7.2.2 through 7.2.7 Fortinet FortiManager Cloud...

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...

CVE-2024-47575

CVE-2024-47575 is a critical unauthenticated remote code execution vulnerability in Fortinet FortiManager (including FortiManager Cloud) impacting multiple versions (from 6.2/6.4/7.x lines) via the fgfmsd/fgfmd daemon. The flaw stems from missing authentication for a critical function, allowing a...

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...

Fortinet FortiManager 访问控制错误漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...