A vulnerability was found in Fortinet FortiPortal up to 7.0.6/7.2.1. It has been classified as critical. Affected is an unknown function of the component HTTP Request Handler. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2023-46712. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.