CVE-2024-36508

creationtimestamp| type| source ---|---|--- 2025-02-11 16:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113986226670304919 2025-02-11 17:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y2uyry2d 2025-02-11 17:45:29+00:00| seen|...

CVE-2024-36508

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose...

CVE-2024-36508

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose...

CVE-2024-36508

CVE-2024-36508 affects Fortinet FortiManager (versions 7.4.0–7.4.2 and before 7.2.5) and FortiAnalyzer (7.4.0–7.4.2 and before 7.2.5). The issue is an improper limitation of a pathname to a restricted directory (Path Traversal, CWE-22) that, when coupled with diagnose privileges, allows an authen...