Fortipam Chrome Extension
Monthly
UI redress (clickjacking) in the Fortinet FortiPAM Chrome Extension allows an attacker-controlled web page to frame or overlay the extension's rendered interface so that a victim's clicks are redirected into unintended, privileged extension actions, resulting in information disclosure with limited integrity impact. The affected code is the 7.4 branch and the 8.0 builds through 8.0.0 as scoped by Fortinet advisory FG-IR-26-168 (the vendor description covers all 8.0 and 7.4 versions, while ENISA EUVD specifically lists 8.0.1). Exploitation is remote and unauthenticated from the attacker's side (PR:N, CVSS:3.1/AV:N/AC:L/S:C) but is gated by required victim interaction (UI:R) - the user must have the vulnerable extension installed and be lured into clicking within an attacker-planted frame, which materially limits real-world exploitability despite Fortinet's 9.6 score; no public exploit code has been identified at time of analysis, the issue is not in CISA KEV, and the assessed impact (C:H/I:L/A:N) is lower than the vendor rating.
UI redress (clickjacking) in the Fortinet FortiPAM Chrome Extension allows an attacker-controlled web page to frame or overlay the extension's rendered interface so that a victim's clicks are redirected into unintended, privileged extension actions, resulting in information disclosure with limited integrity impact. The affected code is the 7.4 branch and the 8.0 builds through 8.0.0 as scoped by Fortinet advisory FG-IR-26-168 (the vendor description covers all 8.0 and 7.4 versions, while ENISA EUVD specifically lists 8.0.1). Exploitation is remote and unauthenticated from the attacker's side (PR:N, CVSS:3.1/AV:N/AC:L/S:C) but is gated by required victim interaction (UI:R) - the user must have the vulnerable extension installed and be lured into clicking within an attacker-planted frame, which materially limits real-world exploitability despite Fortinet's 9.6 score; no public exploit code has been identified at time of analysis, the issue is not in CISA KEV, and the assessed impact (C:H/I:L/A:N) is lower than the vendor rating.