A path traversal vulnerability exists in Fortinet FortiOS versions 7.2.0 through 7.2.13, 7.4.0 through 7.4.12, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1, as well as all versions of FortiPAM 1.0 through 1.6. This flaw may allow an unauthenticated attacker to bypass authentication by using specially crafted credentials.