A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1,

Summary

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder

Timeline

1. Jan 14, 2025, 2:09 PM UTCCVE published
2. Jan 14, 2025, 3:17 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Oct 21, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

4. Oct 22, 2026, 1:48 PM UTCRecord last updated

Affected versions

• Fortinet FortiOS

  From 7.4.0 · through 7.4.4; From 7.2.0 · through 7.2.9; From 7.0.0 · through 7.0.15; From 6.4.0 · through 6.4.15

• Fortinet FortiProxy

  From 7.4.0 · through 7.4.5; From 7.2.0 · through 7.2.11; From 7.0.0 · through 7.0.18; From 2.0.0 · through 2.0.14; From 1.2.1 · through 1.2.13; From 1.1.4 · through 1.1.6; From 01.01.00 · through 01.01.03; From 01.00.00 · through 01.00.07

• Fortinet FortiManager

  From 7.6.0 · through 7.6.1; From 7.4.1 · through 7.4.3

• Fortinet FortiManager Cloud

  From 7.4.1 · through 7.4.3

References 1