An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.11, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10 may allow an authenticated attacker whose profile only has read permission to write and delete files from the underlying filesystem via crafted HTTP or HTTPs requests.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| Fortinet | FortiAnalyzer | 7.6.0 – ≤ 7.6.4, 7.4.0 – ≤ 7.4.7, 7.2.0 – ≤ 7.2.11 | |
| Fortinet | FortiManager | 7.6.0 – ≤ 7.6.4, 7.4.0 – ≤ 7.4.7, 7.2.0 – ≤ 7.2.11 | |
| Fortinet | FortiManager Cloud | 7.6.0 – ≤ 7.6.4, 7.4.1 – ≤ 7.4.7, 7.2.1 – ≤ 7.2.10 | |
| fortinet | fortimanagercloud | 7.6.4 |
Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.
