Fortinet FortiSOAR Privilege Escalation Vulnerability via OS Command Injection

A vulnerability allowing local privilege escalation through OS command injection has been identified in Fortinet FortiSOAR versions 7.6.0 to 7.6.1, 7.5.0 to 7.5.1, and all versions of 7.4 and 7.3. This vulnerability could be exploited by an attacker with low-privileged shell access to execute crafted commands that escalate privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling a user to gain elevated rights or access within the application or system.

Remediation

Users can upgrade to FortiSOAR version 7.6.2 or above, or 7.5.2 or above. For FortiSOAR versions 7.4 and 7.3, users should migrate to a fixed release.