Fortinet FortiPAM and FortiSRA Improper Access Control Vulnerability Allowing Privilege Escalation
Vulnerability
A vulnerability exists in Fortinet FortiPAM versions 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, and FortiSRA versions 1.4.0 through 1.4.1. The issue arises from improper handling of permissions, allowing attackers to bypass access controls by sending specially crafted HTTP requests.
Impact
Exploitation of this vulnerability could lead to unauthorized access or privilege escalation by allowing attackers to bypass access controls.
Added: Jun 10, 2025, 6:34 PM
Updated: Jun 10, 2025, 6:34 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.2remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.