Tracker / CVE-2022-42474
CVE-2022-42474
Medium 6.5
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.
Affected products and versions
| fortinet | fortios · 6.2.0 → 6.2.15 |
|---|---|
| fortinet | fortios · 6.4.0 → 6.4.12 |
| fortinet | fortios · 7.0.0 → 7.0.9 |
| fortinet | fortios · 7.2.0 → 7.2.3 |
| fortinet | fortiproxy |
| fortinet | fortiproxy · 1.0.0 → 1.0.7 |
| fortinet | fortiproxy · 1.1.0 → 1.1.6 |
| fortinet | fortiproxy · 1.2.0 → 1.2.13 |
| fortinet | fortiproxy · 2.0.0 → 2.0.11 |
| fortinet | fortiproxy · 7.0.0 → 7.0.7 |
| fortinet | fortiswitchmanager |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.