An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 7.2.6Upgrade FortiAnalyzer to 7.0.13Upgrade FortiAnalyzer to 7.4.4Upgrade to the latest version of FortiAnalyzer | Feb 3, 2025 | Jan 14, 2025 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 7.2.6Upgrade FortiManager to 7.4.4Upgrade FortiManager to 7.0.13Upgrade to the latest version of FortiManager | Feb 2, 2025 | Jan 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub