PSIRT Advisories

FortiAuthenticator Privilege Escalation Vulnerability

description-logo Description

Authenticated admin users may be able to obtain access to a system shell from the command line interface.

Impact Detail

Authenticated admin users can execute operating system commands with full read and write access to the file system.

Affected Products

FortiAuthenticator 1.x and 2.x


Upgrade to FortiAuthenticator 3.0 or higher.


Yvan Janssens