NetSight
high8.8

CVE-2023-42791

A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2…

Impact

A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.

Affected products

VendorProductAffected versions
FortinetFortimanager
from 6.2.0 before 6.2.12
from 6.4.0 before 6.4.13
from 7.0.0 before 7.0.9
from 7.2.0 before 7.2.4
Version 7.4.0

Weakness classification

References