FortiOS FortiAuthenticator HA Improper Authentication Privilege Escalation

Successful exploitation elevates an authenticated read-only FortiOS user to read-write privileges. This permits unauthorized modification of appliance configuration and security-policy settings within the scope available to a write-capable account.

If immediate patching is not possible, reduce exposure by limiting administrative access to trusted management networks and accounts, minimizing the number of read-only administrative users, and closely monitoring for repeated or abnormal login attempts against affected systems. Where operationally feasible, review or temporarily avoid the specific FortiAuthenticator HA configuration associated with the vulnerable condition until updates can be applied.

Upgrade FortiOS to a vendor-remediated release applicable to the deployed branch. Available upgrade guidance recommends FortiOS 7.4.2 or later, 7.2.7 or later, 7.0.14 or later, 6.4.15 or later, or 6.2.16 or later, as applicable.