CVE-2024-32117

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-32117
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker to read arbitrary files from the underlying system via crafted HTTP or HTTPs requests.

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-24-115
Configurations

No configuration.

History

13 Nov 2024, 17:01

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') [CWE-22] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores 7.2.5, FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores 7.2.5 y FortiAnalyzer-BigData versión 7.4.0 y anteriores 7.2.7 permite a un atacante privilegiado leer archivos arbitrarios del sistema subyacente a través de solicitudes HTTP o HTTPS manipuladas.

12 Nov 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-12 19:15

Updated : 2024-11-13 17:01

NVD link : CVE-2024-32117

Mitre link : CVE-2024-32117

CVE.ORG link : CVE-2024-32117

JSON object : View

Products Affected

No product.

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')