Fortinet FortiClientEMS Improper Authentication Vulnerability Allowing Unauthorized Operations

A vulnerability allowing improper authentication has been identified in Fortinet FortiClientEMS versions through 7.4.0 and prior to 7.2.4. This vulnerability allows an unauthenticated attacker, who knows the targeted user's FCTUID and VDOM, to perform actions such as uploading or tagging on behalf of the user. The exploitation is carried out through specially crafted TCP requests.

Impact

Exploitation of this vulnerability could lead to unauthorized operations being performed on behalf of the targeted user, potentially allowing for manipulation of user data or settings.