CVE-2024-50566

Summary

CVE-2024-50566 is a critical vulnerability affecting various versions of Fortinet FortiManager and FortiManager Cloud. An attacker who gains authentication can exploit this os command injection flaw, inserting unauthorized code into FortiManager's system. By crafting specific FGFM requests, the attacker can potentially execute arbitrary commands on the targeted FortiManager or FortiManager Cloud instances, posing a significant risk to organizational security. This vulnerability impacts FortiManager versions 7.6.0 through 7.6.1, 7.4.5 through 7.4.0, and 7.2.1 through 7.2.8, as well as FortiManager Cloud versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.4, and 7.2.2 through 7.2.7. Organizations using these versions are advised to apply the available patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.