In its preliminary research, Fortinet has found no evidence or reports of any low-level system installation of malware or backdoors on the compromised systems, according to the advisory.
“To the best of our knowledge, there have been no indicators of modified databases, or connections and modifications to the managed devices,” Fortinet added.
The affected FortiManager versions include FortiManager 6.2, 6.4,7.0,7.2, 7.4, and 7.6 which have been fixed in their respective subsequent releases. Additionally, FortiManager Cloud versions 6.4, 7.0, 7.2, and 7.4 are affected with fixes in their subsequent versions, with the exception of 6.4 which has all of its releases affected.
