The issue is related to a lack of authentication check for HTTP requests in the web interface of the FortiOS operating system. This can be exploited by a remote attacker to perform cross-site request forgery (CSRF) attacks, potentially allowing them to hijack administrator authentication for modifying settings, policies, or restarting the device. The exploitation can occur through specific actions, such as a rebootme action to system/maintenance/shutdown.