CVE-2024-52964 in FortiManager

Riassunto

di MITRE • 12/08/2025

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9 and below 7.0.13 & FortiManager Cloud version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5 and before 7.2.9 allows an authenticated remote attacker to overwrite arbitrary files via FGFM crafted requests.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Fortinet
• Prenotare: 18/11/2024
• Divulgazione: 12/08/2025
• Moderazione: accettato
• Voce: VDB-319780
• CPE: pronto
• CWE: CWE-22 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.00601
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-52964
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-52964
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-52964/