Fortinet FortiAnalyzer and FortiManager Improper Output Neutralization for Logs Vulnerability

A vulnerability allowing improper output neutralization for logs has been identified in Fortinet FortiAnalyzer and FortiManager. This issue affects multiple versions: FortiAnalyzer versions 7.6.1 and prior, 7.4.5 and prior, 7.2.8 and prior, 7.0.13 and prior, as well as FortiManager versions 7.6.1 and prior, 7.4.5 and prior, 7.2.8 and prior, 7.0.12 and prior. The vulnerability could allow an unauthenticated remote attacker to manipulate the logs by sending crafted login requests.

Impact

Exploitation of this vulnerability could lead to log pollution, where an attacker could inject misleading or false information into the system logs.