CVE-2024-32117

Summary

CVE-2024-32117 is a path traversal vulnerability affecting Fortinet FortiManager versions 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer versions 7.4.0 through 7.4.2 and below 7.2.5, and FortiAnalyzer-BigData version 7.4.0 and below 7.2.7. This issue allows a privileged attacker to read arbitrary files from the underlying system by exploiting an improper limitation of a pathname to a restricted directory. This vulnerability, identified as CWE-22, can be triggered through crafted HTTP or HTTPs requests. Successful exploitation could lead to potential data leakage and unauthorized access. Fortinet urges users to upgrade to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.