VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026

CVE-2024-33502

CVE-2024-33502

Description

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPs requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Fortinet/Fortianalyzer2 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=6.0.0,<7.2.6
    • cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*range: 7.4.0
  • Fortinet/Fortimanager2 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=6.0.0,<7.2.6
    • cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*range: 7.4.0
  • Fortinet/FortiManager, FortiAnalyzerllm-create
    Range: 7.4.0-7.4.2, 7.2.0-7.2.5, 7.0.0-7.0.12, 6.4.0-6.4.14, 6.2.0-6.2.12, 6.0.0-6.0.12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.