An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPs requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-143 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Jan 2025, 21:03
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet fortianalyzer
Fortinet Fortinet fortimanager |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-143 - Vendor Advisory | |
| CPE | cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-01-21 21:03
NVD link : CVE-2024-33502
Mitre link : CVE-2024-33502
JSON object : View
Products Affected
fortinet
- fortianalyzer
- fortimanager
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')