FortiAuthenticator flaw lets authenticated attackers escalate privileges
Original title: Improper privilege management
Fortinet scores the improper privilege management issue CVSS 7.2; the advisory was revised on November 10.
Fortinet PSIRT describes an improper privilege management flaw in FortiAuthenticator. An authenticated attacker may escalate privileges. The issue is scored CVSS 7.2, and the advisory was revised on November 10. The snippet does not name affected versions or a fix.
Unconfirmed: Affected versions, a fix, a CVE, and exploitation status are not stated.
- Fortinet classifies the issue as CWE-269.
- The attacker must already be authenticated.
- The CVSSv3 score is 7.2.
- The advisory was revised on November 10.
Impact: authenticated attacker can escalate privileges
| Product | Affected |
|---|---|
| Fortinet FortiAuthenticator | — |
- Vendors
- Fortinet
- Products
- FortiAuthenticator
From the original article
CVSSv3 Score: 7. 2 An Improper Privilege Management vulnerability[CWE-269] in FortiAuthenticator may allow an authenticated attacker to escalate privileges. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.