FortiClientEMS - Directory Traversal vulnerability

2021-10-0500:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

31.5%

JSON

A path traversal vulnerability [CWE-22] in FortiClientEMS may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

CPENameOperatorVersion
forticlientemseq6.4.1
forticlientemseq6.4.0
forticlientemseq6.2.8
forticlientemseq6.2.7
forticlientemseq6.2.6
forticlientemseq6.2.4
forticlientemseq6.2.3
forticlientemseq6.2.2
forticlientemseq6.2.1
forticlientemseq6.2.0

Name	Operator	Version
forticlientems	eq	6.4.1
forticlientems	eq	6.4.0
forticlientems	eq	6.2.8
forticlientems	eq	6.2.7
forticlientems	eq	6.2.6
forticlientems	eq	6.2.4
forticlientems	eq	6.2.3
forticlientems	eq	6.2.2
forticlientems	eq	6.2.1
forticlientems	eq	6.2.0

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for FG-IR-20-074