CVE-2024-32115

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@fortinet.com

Published

2025-01-14

Last modified

2025-02-18

Weaknesses

CWE-22, CWE-23

Affected products

• Fortimanager (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-24-097