This vulnerability in Fortinet FortiWebManager affects specific versions including 7.2.0, 7.0.0, 6.3.0, 6.2.3, and 6.0.2. Due to improper authorization controls, an attacker with low privileges can execute unauthorized code or commands through HTTP requests or command-line interface interactions. The CVSS 3.1 base score is 6.4, indicating medium severity. The vendor has released an official fix to remediate this vulnerability.

Successful exploitation allows an attacker with limited privileges to execute unauthorized code or commands on the affected FortiWebManager system. This can lead to unauthorized actions but does not directly impact confidentiality or availability according to the CVSS vector. No known exploits in the wild have been reported at this time.

An official fix is available from Fortinet to address this vulnerability. Users should apply the vendor-provided patches for the affected versions to remediate the issue. Since this is not a cloud service, remediation requires updating the affected FortiWebManager installations accordingly.