This exploit functions as a vulnerability in the HTTP/S admin access to most Fortinet solutions. Any organizations that deployed Fortinet devices running FortiOS, FortiProxy, or FortiSwitchManager should immediately respond to this alert.
Nucleus researcher offers insight into how the vulnerability surrounding Zoho’s cloud-based ManageEngine platform was ultimately uploaded to the KEV catalog.