← CVE Intelligence

CVE-2022-41328

Fortinet / FortiOS PUBLISHED

Description (CNA)

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiOSaffected 7.2.0 through 7.2.3; affected 7.0.0 through 7.0.9; affected 6.4.0 through 6.4.11; affected 6.2.0 through 6.2.13; affected 6.0.0 through 6.0.16

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.