An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.11, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10 may allow an authenticated attacker whose profile only has read permission to write and delete files from the underlying filesystem via crafted HTTP or HTTPs requests.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Fortinet | FortiAnalyzer | 7.6.0 – ≤ 7.6.4, 7.4.0 – ≤ 7.4.7, 7.2.0 – ≤ 7.2.11 | |
| Fortinet | FortiManager | 7.6.0 – ≤ 7.6.4, 7.4.0 – ≤ 7.4.7, 7.2.0 – ≤ 7.2.11 | |
| Fortinet | FortiManager Cloud | 7.6.0 – ≤ 7.6.4, 7.4.1 – ≤ 7.4.7, 7.2.1 – ≤ 7.2.10 | |
| fortinet | fortimanagercloud | 7.6.4 |
Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.
