FG-IR-24-143: Arbitrary file delete on firmware import image feature
Published Jan 14, 2025
·Updated
A relative path traversal vulnerability [CWE-23] in FortiManager administrative interface may allow a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.
Affected Software
12 affected componentsFixes available
Fortinet FortiAnalyzer>=7.4.0<=7.4.2
Fortinet FortiAnalyzer>=7.2.0<=7.2.5
Fortinet FortiAnalyzer>=7.0
Fortinet FortiAnalyzer>=6.4
Fortinet FortiAnalyzer>=6.2
Fortinet FortiAnalyzer>=6.0
Fortinet FortiManager>=7.4.0<=7.4.2
Fortinet FortiManager>=7.2.0<=7.2.5
Fortinet FortiManager>=7.0
Fortinet FortiManager>=6.4
Fortinet FortiManager>=6.2
Fortinet FortiManager>=6.0
Event History
Jan 14, 2025
Advisory Published
via FortiGuard·12:00 AM
Frequently Asked Questions
1
What is the severity of FG-IR-24-143?
The severity of FG-IR-24-143 is considered high due to its potential to allow privileged attackers to delete files.
2
How do I fix FG-IR-24-143?
To fix FG-IR-24-143, you should upgrade FortiManager and FortiAnalyzer to versions 7.4.3 or 7.2.6 respectively.
3
Which Fortinet products are affected by FG-IR-24-143?
FG-IR-24-143 affects FortiManager and FortiAnalyzer versions prior to 7.4.3 and 7.2.6.
4
What type of vulnerability is FG-IR-24-143?
FG-IR-24-143 is a relative path traversal vulnerability classified under CWE-23.
5
Who can exploit FG-IR-24-143?
FG-IR-24-143 can be exploited by a privileged attacker who can send crafted HTTP or HTTPS requests.