An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an attacker to bypass authentication controls and gain unauthorized access. However, full impersonation requires the attacker to have obtained certain IDs and data through other means.