CVE-2024-46664: Path Traversal
A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46664?
CVE-2024-46664 is classified as a high-severity vulnerability due to the potential for privileged attackers to access sensitive files.
How do I fix CVE-2024-46664?
To mitigate CVE-2024-46664, upgrade Fortinet FortiRecorder to version 7.2.2 or later, or update to version 7.0.5 or later.
What systems are affected by CVE-2024-46664?
CVE-2024-46664 affects Fortinet FortiRecorder versions 7.2.0 to 7.2.1 and earlier than 7.0.4.
What type of vulnerability is CVE-2024-46664?
CVE-2024-46664 is a relative path traversal vulnerability that allows reading files from the underlying filesystem.
Can CVE-2024-46664 be exploited remotely?
Yes, CVE-2024-46664 can be exploited remotely via crafted HTTP or HTTPS requests.