NetSight
medium5.5

CVE-2024-32115

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete f…

Impact

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.

Affected products

VendorProductAffected versions
FortinetFortimanager
from 7.0.0 before 7.2.6
from 7.4.0 before 7.4.3

Weakness classification

References