Vulnerability Description
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortimanager | >= 6.4.0, < 7.2.6 |
| Fortinet | Fortianalyzer | >= 6.4.0, < 7.2.6 |
Related Weaknesses (CWE)
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-147Vendor Advisory
FAQ
What is CVE-2024-36508?
CVE-2024-36508 is a vulnerability with a CVSS score of 6.0 (MEDIUM). An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyze...
How severe is CVE-2024-36508?
CVE-2024-36508 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-36508?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortimanager, Fortinet Fortianalyzer.