CVEvulnerability

CVE-2024-36508

6.0 MEDIUM Published 2025-02-11 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-22

Description

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system.

Affected configurations

• fortinet fortimanager (>= 6.4.0 < 7.2.6) • fortinet fortimanager (>= 7.4.0 < 7.4.3) • fortinet fortianalyzer (>= 6.4.0 < 7.2.6) • fortinet fortianalyzer (>= 7.4.0 < 7.4.3)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References