CVE-2022-42474
CVSS V2 None
CVSS V3 None
Description
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.
Overview
- CVE ID
- CVE-2022-42474
- Assigner
- fortinet
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-06-13T08:41:42.277Z
- Last Modified Date
- 2023-06-13T08:41:42.277Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://fortiguard.com/psirt/FG-IR-22-393 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-42474 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42474 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-24 18:02:38 | Added to TrackCVE |