Wrong login behaviour Fortigate 7.4.4 and 7.4.5

[Forti1231]

Hello everyone!

I am experiencing some weird behaviour with login on Fortigate device with os 7.4.4 and 7.4.5.

I can successfully login on the device with whatever username (but no one local username, try for example username: qwerfdsa) as long as the password is correct (the password of a local user or from a tacacs+ server).

I discovered this by mistake

There is anyone who also discovered this problem?

And also, there is a way to solve this problem?

[funkylicious]

Hi,

Maybe this is enabled?

config system global
set admin-restrict-local enable
end

or , https://community.fortinet.com/t5/Support-Forum/Anyone-experiencing-GUI-Authentication-issues-on-7-4...

The problem was a combination of stale HTTPS administration sessions, coupled with the disabling of "Allow concurrent sessions" in System>Settings>Administration Settings.