Multiple serious vulnerabilities have been found in Fortinet FortiAuthenticator. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, inject code and read arbitrary files.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via a specially designed operation parameter;
2. An unknown vulnerability can be exploited locally via manipulations with files and commands;
3. Lack of login information emcapsulation can be exploited remotely via log reading and other unknown vectors.

Fortinet FortiAuthenticator versions earlier than 3.2.1

Update to latest version!

Fortinet bulletin