FG-IR-24-147: Multiple arbitrary file deletion in the CLI
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiManager and FortiAnalyzer CLI may allow any authenticated admin user with diagnose privileges to delete any file on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-24-147?
The severity of FG-IR-24-147 is categorized as critical due to its potential for file deletion by authenticated admin users.
How do I fix FG-IR-24-147?
To fix FG-IR-24-147, upgrade FortiManager and FortiAnalyzer to version 7.4.3 or 7.2.6 or later.
Who is affected by FG-IR-24-147?
FG-IR-24-147 affects FortiManager and FortiAnalyzer versions 7.4.0 to 7.4.2 and 7.2.0 to 7.2.5.
What type of vulnerability is FG-IR-24-147?
FG-IR-24-147 is a path traversal vulnerability that can lead to unauthorized file deletion.
What should I do if I can't update to the recommended versions for FG-IR-24-147?
If you cannot update, it's crucial to restrict admin access and monitor file changes to mitigate the risk associated with FG-IR-24-147.