An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 6.4.12Upgrade FortiAnalyzer to 7.0.7Upgrade FortiAnalyzer to 7.2.2 | Jul 24, 2023 | Jul 11, 2023 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 6.4.12Upgrade to the latest version of FortiManagerUpgrade FortiManager to 7.2.2Upgrade FortiManager to 7.0.7 | Jul 27, 2023 | Jul 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub