Fortinet FortiOS Privilege Escalation Vulnerability in Security Fabric Access Profiles

A vulnerability allowing incorrect privilege assignment has been identified in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9, and prior to 7.0.15. This vulnerability allows an authenticated admin with Security Fabric permissions to escalate privileges to super-admin. The escalation is achieved by connecting the targeted FortiGate device to a malicious upstream FortiGate controlled by the admin.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, granting an admin super-admin rights.