CVE-2024-35274

CVSS 3.1 Score 2.3 of 10 (low)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 23

Summary

CVE-2024-35274 is a Path Traversal vulnerability affecting Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2, and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7. This issue permits privileged attackers with read-write administrative privileges to create non-arbitrary files in designated directories by manipulating crafted CLI (Command Line Interface) requests. This vulnerability, classified as CWE-22, can lead to potential security risks if exploited successfully.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • FortiAnalyzer
  • FortiManager

Affected Vendors

  • Fortinet

Advisories, Assessments, and Mitigations