Attack surface management provider watchTowr has reportedly discovered a new zero-day vulnerability in cybersecurity provider Fortinet’s products.
According to watchTowr, this flaw could potentially allow a managed FortiGate device to elevate privileges and take control of the FortiManager instance. This new vulnerability, dubbed “FortiJump Higher” by watchTowr researchers, bears similarities to a previous flaw known as “FortiJump.”
The original FortiJump vulnerability, also known as CVE-2024-47575, is a critical issue in FortiManager that allows remote attackers to execute arbitrary code or commands. It has a common vulnerability severity score (CVSS) of 9.8 and has been actively exploited in the wild.
In a recent report, watchTowr claimed to have found new issues in FortiManager while trying to reproduce a FortiJump exploit in its lab. The company stated that the patch released by Fortinet to address FortiJump may not be effective for all exploit methods.
watchTowr researchers expressed concerns about the overall quality of the FortiManager codebase and suggested that successful threat actors may have identified additional vulnerabilities beyond FortiJump Higher. They also noted that they contacted Fortinet about the new vulnerability but decided to publish their findings due to the similarities between FortiJump and FortiJump Higher.
Fortinet has been informed of these new findings and is reportedly investigating the matter. This is a developing story, and more information may be provided as it becomes available.