Fortinet FortiClientEMS Authenticated SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Fortinet FortiClientEMS versions 7.4.3 through 7.4.4, 7.4.0 through 7.4.1, 7.2.0 through 7.2.10, and all versions of 7.0. This vulnerability allows an authenticated attacker with at least read-only admin permissions to execute unauthorized SQL commands. The issue arises from improper neutralization of special elements in SQL commands, and can be exploited via crafted HTTP or HTTPS requests.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of SQL code or commands, potentially allowing for manipulation of the database or extraction of sensitive information.

Remediation

Users can upgrade to FortiClientEMS 7.4.5 or above, or FortiClientEMS 7.2.12 or above. FortiClientEMS 7.0 users should migrate to a fixed release.