CVE-2024-36508

CVSS 3.1 Score 6 of 10 (medium)

Details

Published Feb 11, 2025
CWE ID 22

Summary

CVE-2024-36508 is a Path Traversal vulnerability affecting Fortinet FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5, as well as FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5. This issue permits authenticated admin users with diagnose privileges to delete files on the system beyond restricted directories, introducing potential security risks due to unintended file deletion.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • FortiAnalyzer
  • FortiManager

Affected Vendors

  • Fortinet