CVE-2023-45581: 
FortiClient EMS vulnerability analysis and mitigation

A high-severity improper privilege management vulnerability (CVE-2023-45581) was discovered in FortiClientEMS graphical administrative interface. The vulnerability affects FortiClientEMS versions 6.2, 6.4, and various 7.x versions up to 7.2.2. The issue was internally discovered and reported by Théo Leleu of Fortinet Product Security team (Fortinet PSIRT).

The vulnerability (CVE-2023-45581) is classified as an improper privilege management issue (CWE-269) with a CVSS v3 score of 7.9 (High). The vulnerability allows a Site administrator with Super Admin privileges to perform global administrative operations affecting other sites through crafted HTTP or HTTPS requests (Fortinet PSIRT).

The vulnerability enables Site administrators with Super Admin privileges to execute unauthorized operations that affect other sites, potentially compromising the security boundaries between different site configurations (Fortinet PSIRT).

Fortinet has released patches to address this vulnerability. Users are advised to upgrade to the following versions: FortiClientEMS 7.2.3 or above for 7.2.x versions, FortiClientEMS 7.0.11 or above for 7.0.x versions. Users of FortiClientEMS 6.2 and 6.4 should migrate to a fixed release (Fortinet PSIRT).