This vulnerability in Fortinet FortiOS involves exposure of sensitive information due to a bypass of a patch designed to address symbolic link persistency issues. The flaw can be exploited remotely without authentication via crafted HTTP requests, but exploitation requires prior compromise of the system at the filesystem level through another vulnerability. Affected versions include all versions of FortiOS 6.4, 7.0, and 7.2, as well as versions 7.4.0 through 7.4.6 and 7.6.0 through 7.6.1. The vendor has released an official fix to address this issue.

Successful exploitation could lead to unauthorized disclosure of sensitive information. However, exploitation is constrained by the prerequisite that the attacker must have already compromised the system via another vulnerability at the filesystem level. There is no indication of impact on integrity or availability. No known exploits are reported in the wild.

An official fix is available from Fortinet and should be applied to affected FortiOS versions to remediate this vulnerability. Since the vulnerability requires prior system compromise, maintaining overall system security and applying all relevant patches is critical. No additional mitigation steps are specified beyond applying the official patch.