Description
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiOS | Fortinet / FortiOS | >= 6.4.0, <= 6.4.16 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.0.0, <= 7.0.19 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.2.0, <= 7.2.13 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.4.0, <= 7.4.9 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.6.0, <= 7.6.4 | affected |
| FortiPAM | Fortinet / FortiPAM | >= 1.0.0, <= 1.0.3 | affected |
| FortiPAM | Fortinet / FortiPAM | >= 1.1.0, <= 1.1.2 | affected |
| FortiPAM | Fortinet / FortiPAM | 1.2.0 | affected |
| FortiPAM | Fortinet / FortiPAM | >= 1.3.0, <= 1.3.1 | affected |
| FortiPAM | Fortinet / FortiPAM | >= 1.4.0, <= 1.4.3 | affected |
| FortiPAM | Fortinet / FortiPAM | >= 1.5.0, <= 1.5.1 | affected |
| FortiPAM | Fortinet / FortiPAM | >= 1.6.0, <= 1.6.2 | affected |
| FortiPAM | Fortinet / FortiPAM | 1.7.0 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.0.0, <= 7.0.23 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.2.0, <= 7.2.16 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.4.0, <= 7.4.11 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.6.0, <= 7.6.4 | affected |
| FortiSwitchManager | Fortinet / FortiSwitchManager | >= 7.0.0, <= 7.0.6 | affected |
| FortiSwitchManager | Fortinet / FortiSwitchManager | >= 7.2.0, <= 7.2.7 | affected |
| RUGGEDCOM APE1808 | Siemens / RUGGEDCOM APE1808 | >= 0, < * | affected |