Fortinet FortiManager Code Injection Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains (ADOM) to further simplify multi-device security deployment and management.A security vulnerability exists in Fortinet FortiManager, which stems from incorrect authentication in FortiManager. An attacker could exploit this vulnerability to assign or unassign global policy packages to the flatui/json module via POST requests.