FortiSOAR Unverified Password Change Vulnerability

FortiSOAR is a cloud-based platform for automating and streamlining IT processes. This vulnerability allows an attacker who has already gained access to a victim's user account to reset the account credentials without being prompted for the account's password, potentially leading to unauthorized access to sensitive data.

Affected versions: 7.5.1, 7.6.2 If you don't recognise this software, you're probably not affected.

1. Upgrade to FortiSOAR 7.6.3 or above.
   • Solution: https://support.fortinet.com/fortios/ReleaseNotes/700
2. Immediate mitigations:
   • Restrict network access to your FortiSOAR instance (firewall it from the public internet)
   • Audit admin account activity for suspicious access patterns
   • Monitor for unauthorized token creation

• Vendor Advisory