CVE-2024-32115
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 14, 2025
CWE ID 23
CWE ID 22
Summary
CVE-2024-32115 is a newly disclosed vulnerability affecting Fortinet FortiManager versions 7.4.0 through 7.4.2 and older versions up to 7.2.5. This issue, classified as a relative path traversal vulnerability (CWE-23), enables privileged attackers to manipulate HTTP or HTTPs requests to delete files from the underlying filesystem. The exploitation of this vulnerability could potentially lead to significant data loss or system compromise. Fortinet urges users to apply available patches as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- FortiManager
Affected Vendors
- Fortinet