Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-35274

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests.

Published

2024-11-12T19:15:09.993

Last Modified

2025-01-17T20:29:43.327

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 2.3 (LOW)

Weaknesses
  • Type: Secondary
    CWE-23
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortianalyzer < 7.4.3 Yes
Application fortinet fortianalyzer_big_data < 7.4.1 Yes
Application fortinet fortimanager < 7.4.3 Yes
References