FortiEDR - Denial of service due to folder access permission change


An improper control of a resource through its lifetime [CWE-664] vulnerability in FortiEDR Collector may allow a privileged attacker to make the application unresponsive via changing its root directory access permission.

Affected Products

FortiEDR Collector version 5.0.3 b0233 and earlier


Upgrade to FortiEDR Collector version 5.0.3 b0508 or above


Fortinet is pleased to thank Mike de Almeida for reporting this vulnerability under responsible disclosure