FortiClientEMS - Improper privilege management for site super administrator Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-23-357 Final 1 1 2024-02-08T00:00:00 Current version 2024-02-08T00:00:00 2024-02-06T00:00:00 An improper privilege management vulnerability [CWE-269] in FortiClientEMS graphical administrative interface may allow an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests. None Execute unauthorized code or commands Internally discovered and reported by Théo Leleu of Fortinet Product Security team. FortiClientEMS 7.2.2 FortiClientEMS 7.2.1 FortiClientEMS 7.2.0 FortiClientEMS 7.0.10 FortiClientEMS 7.0.9 FortiClientEMS 7.0.8 FortiClientEMS 7.0.7 FortiClientEMS 7.0.6 FortiClientEMS 7.0.4 FortiClientEMS 7.0.3 FortiClientEMS 7.0.2 FortiClientEMS 7.0.1 FortiClientEMS 7.0.0 FortiClientEMS 6.4.9 FortiClientEMS 6.4.8 FortiClientEMS 6.4.7 FortiClientEMS 6.4.4 FortiClientEMS 6.4.3 FortiClientEMS 6.4.2 FortiClientEMS 6.4.1 FortiClientEMS 6.4.0 FortiClientEMS 6.2.9 FortiClientEMS 6.2.8 FortiClientEMS 6.2.7 FortiClientEMS 6.2.6 FortiClientEMS 6.2.4 FortiClientEMS 6.2.3 FortiClientEMS 6.2.2 FortiClientEMS 6.2.1 FortiClientEMS 6.2.0 CVE-2023-45581 FortiClientEMS-7.2.2 FortiClientEMS-7.2.1 FortiClientEMS-7.2.0 FortiClientEMS-7.0.10 FortiClientEMS-7.0.9 FortiClientEMS-7.0.8 FortiClientEMS-7.0.7 FortiClientEMS-7.0.6 FortiClientEMS-7.0.4 FortiClientEMS-7.0.3 FortiClientEMS-7.0.2 FortiClientEMS-7.0.1 FortiClientEMS-7.0.0 FortiClientEMS-6.4.9 FortiClientEMS-6.4.8 FortiClientEMS-6.4.7 FortiClientEMS-6.4.4 FortiClientEMS-6.4.3 FortiClientEMS-6.4.2 FortiClientEMS-6.4.1 FortiClientEMS-6.4.0 FortiClientEMS-6.2.9 FortiClientEMS-6.2.8 FortiClientEMS-6.2.7 FortiClientEMS-6.2.6 FortiClientEMS-6.2.4 FortiClientEMS-6.2.3 FortiClientEMS-6.2.2 FortiClientEMS-6.2.1 FortiClientEMS-6.2.0 7.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:U https://fortiguard.fortinet.com/psirt/FG-IR-23-357 FortiClientEMS - Improper privilege management for site super administrator Reference>