FortiEDR Central Manager - Session API token does not expires after a renewal


An insufficient session expiration vulnerability [CWE-613] in FortiEDR Central Manager may allow an attacker to reuse the unexpired user API access token to gain privileges, should the attacker be able to obtain that API access token (via other, hypothetical attacks).

Affected Products

FortiEDR version 5.0.0 through 5.0.1


Please upgrade to FortiEDR version or above
Please upgrade to FortiEDR version or above


Fortinet is pleased to thank security researcher Kevin Carli for discovering and reporting this vulnerability under responsible disclosure.


2023-09-29: Initial publication