FG-IR-24-152: Arbitrary file write on GUI
Published Jan 14, 2025
·Updated
A relative path traversal vulnerability [CWE-23] in FortiManager & FortiAnalyzer may allow a privileged attacker with super-admin profile and CLI access to write files on the underlying system via crafted HTTP or HTTPS requests.
Affected Software
8 affected componentsFixes available
Fortinet FortiAnalyzer>=7.4.0<=7.4.3
Fortinet FortiAnalyzer>=7.2.0<=7.2.5
Fortinet FortiAnalyzer>=7.0.2<=7.0.12
Fortinet FortiAnalyzer>=6.2.10<=6.2.13
Fortinet FortiManager>=7.4.0<=7.4.3
Fortinet FortiManager>=7.2.0<=7.2.5
Fortinet FortiManager>=7.0.2<=7.0.12
Fortinet FortiManager>=6.2.10<=6.2.13
Event History
Jan 14, 2025
Advisory Published
via FortiGuard·12:00 AM
Frequently Asked Questions
1
What is the severity of FG-IR-24-152?
The severity of FG-IR-24-152 is considered high due to the potential for privileged attackers to exploit the vulnerability.
2
How do I fix FG-IR-24-152?
To fix FG-IR-24-152, upgrade FortiManager and FortiAnalyzer to the recommended versions: 7.4.4, 7.2.6, or 7.0.13.
3
What products are affected by FG-IR-24-152?
The affected products for FG-IR-24-152 include FortiManager and FortiAnalyzer versions between 6.2.10 and 7.4.3.
4
What type of vulnerability is FG-IR-24-152?
FG-IR-24-152 is classified as a relative path traversal vulnerability (CWE-23).
5
Who can exploit FG-IR-24-152?
Only a privileged attacker with a super-admin profile and CLI access can exploit FG-IR-24-152.