FortiOS & FortiProxy - SSH authentication bypass when RADIUS authentication is used

An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component may allow a remote and unauthenticated attacker to login into the device via sending specially crafted Access-Challenge response from the Radius server.

authentication authentication bypass bypass fortios fortiproxy radius ssh