CVE-2023-25606

CVSS V2 None CVSS V3 None
Description
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
Overview
  • CVE ID
  • CVE-2023-25606
  • Assigner
  • fortinet
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-07-11T16:52:51.034Z
  • Last Modified Date
  • 2023-07-11T16:52:51.034Z
References
Reference URL Reference Tags
https://fortiguard.com/psirt/FG-IR-22-471
History
Created Old Value New Value Data Type Notes
2024-06-25 17:46:15 Added to TrackCVE