Name of the Vulnerable Software and Affected Versions FortiOS (affected versions not specified)

Description The issue is related to a lack of authentication check in the web interface of the FortiOS operating system. This can be exploited by a remote attacker to perform a cross-site request forgery (CSRF) attack on certain pages, including the "/login disconnect/disconnect admins" and "/api/v2/monitor/system/config/backup?destination=file&scope=global" API endpoints. The destination and scope variables are used in the vulnerable endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.