Path traversal

2023-05-0322:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

fortinet fortiadc

cwe-23

cli commands

privileged attacker

arbitrary directories

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.7%

JSON

A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands.

CPENameOperatorVersion
fortiadcge7.1.0
fortiadclt7.1.2
fortiadceq7.2.0
fortiadcge5.2.0
fortiadcle7.0.5

Name	Operator	Version
fortiadc	ge	7.1.0
fortiadc	lt	7.1.2
fortiadc	eq	7.2.0
fortiadc	ge	5.2.0
fortiadc	le	7.0.5

References

fortiguard.com/psirt/FG-IR-23-069