Description (CNA)
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiManager | affected 7.4.0; affected 7.2.0 through 7.2.3; affected 7.0.0 through 7.0.8; affected 6.4.0 through 6.4.12; affected 6.2.0 through 6.2.11 |
| Fortinet / FortiAnalyzer | affected 7.4.0; affected 7.2.0 through 7.2.3; affected 7.0.0 through 7.0.8; affected 6.4.0 through 6.4.12; affected 6.2.0 through 6.2.11 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.