Fortinet FortiAnalyzer up to 6.4/7.0.5/7.2.1 Web Request path traversal

Summaryinfo

A vulnerability was found in Fortinet FortiAnalyzer up to 6.4/7.0.5/7.2.1. It has been rated as problematic. The affected element is an unknown function of the component Web Request Handler. The manipulation leads to path traversal. This vulnerability is listed as CVE-2023-25606. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Fortinet FortiAnalyzer up to 6.4/7.0.5/7.2.1. This issue affects an unknown function of the component Web Request Handler. The manipulation with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-23. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. Impacted is confidentiality. The summary by CVE is:

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

The weakness was presented 07/11/2023 as FG-IR-22-471. It is possible to read the advisory at fortiguard.com. The identification of this vulnerability is CVE-2023-25606 since 02/08/2023. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Fortinet

Name

• FortiAnalyzer

Version

• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.2.0
• 7.2.1

License

• commercial

Website

• Vendor: https://www.fortinet.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion