This vulnerability in Fortinet FortiPortal involves improper access control that could allow an attacker with low privileges to gain unauthorized access to resources or functionality. It affects FortiPortal versions 7.4.0 to 7.4.7, 7.2.0 to 7.2.8, and all versions of 7.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact, and an official fix remediation level. No known exploits are reported in the wild at this time.

An attacker with low privileges may exploit this vulnerability to bypass access controls and gain unauthorized access to sensitive information, impacting confidentiality. There is no impact on integrity or availability reported. The vulnerability could potentially lead to data exposure within affected FortiPortal deployments.

An official fix is available from Fortinet to remediate this vulnerability. Users should apply the vendor-provided patches for FortiPortal versions 7.4.0 through 7.4.7, 7.2.0 through 7.2.8, and all 7.0 versions as soon as possible to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.