CVE-2023-44254 | Fortinet FortiAnalyzer/FortiManager up to 6.2.12/6.4.14/7.0.12/7.2.4/7.4.0 HTTP Request authorization (FG-IR-23-204)

A vulnerability, which was classified as problematic, was found in Fortinet FortiAnalyzer and FortiManager up to 6.2.12/6.4.14/7.0.12/7.2.4/7.4.0. Affected is an unknown function of the component HTTP Request Handler. The manipulation leads to authorization bypass.

This vulnerability is traded as CVE-2023-44254. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.