Fortinet FortiAnalyzer and FortiManager Use of Dangerous Function Vulnerability Leading to Denial-of-Service

A vulnerability allowing denial-of-service conditions has been identified in Fortinet FortiAnalyzer and FortiManager. This issue affects multiple versions across different release branches. The vulnerability arises from a use of potentially dangerous functions in the API, which can be exploited by an authenticated attacker. By sending multiple specially crafted HTTP requests, the attacker can cause the system to hang and crash. This disruption occurs if internal locks are aligned, a condition that is not under the attacker's control.

Impact

Exploitation of this vulnerability leads to a system hang, causing crashes and disrupting normal operations.

Remediation

Users can upgrade FortiAnalyzer to version 7.6.5 or 7.4.9, depending on their current version. FortiManager users should upgrade to the same respective versions. For FortiAnalyzer and FortiManager 7.2, users should migrate to a fixed release.