This vulnerability in Fortinet FortiManager Cloud versions 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, all 7.0 versions, and FortiManager versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, and all 7.0 and 6.4 versions is due to improper privilege management. It allows escalation of privilege through specific shell commands. The CVSS 3.1 base score is 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability. The vulnerability requires local access with high privileges and no user interaction. An official fix has been released by Fortinet.

Successful exploitation can lead to escalation of privilege, potentially allowing an attacker to gain higher-level access than intended. This can result in full compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires local access with high privileges, limiting the attack vector. There are no known exploits in the wild at this time.

An official fix is available for this vulnerability. It is recommended to apply the vendor-provided patches promptly to affected versions. Since this is not a cloud-hosted service vulnerability, administrators must update their FortiManager and FortiManager Cloud installations accordingly. No additional mitigations are specified by the vendor advisory.