An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortimanager | Fortinet | 7.0.7 (including) | 7.0.9 (excluding) |
| Fortimanager | Fortinet | 6.4.12 (including) | 6.4.12 (including) |
| Fortimanager | Fortinet | 7.2.3 (including) | 7.2.3 (including) |
| Fortimanager | Fortinet | 7.4.0 (including) | 7.4.0 (including) |