← CVE Intelligence

CVE-2024-35274

Fortinet / FortiAnalyzer PUBLISHED

Description (CNA)

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiAnalyzeraffected 7.4.0 through 7.4.2; affected 7.2.0 through 7.2.8; affected 7.0.0 through 7.0.13; affected 6.4.0 through 6.4.15; affected 6.2.0 through 6.2.13
Fortinet / FortiManageraffected 7.4.0 through 7.4.2; affected 7.2.0 through 7.2.8; affected 7.0.0 through 7.0.13; affected 6.4.0 through 6.4.15; affected 6.2.0 through 6.2.13

CWE

CWE-23

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.