vulnerability
Fortinet FortiManager: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVE-2023-42791)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:C/I:C/A:C) | Feb 20, 2024 | Jan 13, 2025 | Jan 28, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Feb 20, 2024
Added
Jan 13, 2025
Modified
Jan 28, 2025
Description
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
Solutions
fortinet-fortimanager-upgrade-6_2_12fortinet-fortimanager-upgrade-6_4_13fortinet-fortimanager-upgrade-7_0_9fortinet-fortimanager-upgrade-7_2_4fortinet-fortimanager-upgrade-7_4_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.