VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 14, 2025· Updated Jul 8, 2026

CVE-2024-48884

CVE-2024-48884

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Fortinet/Fortimanager3 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.4
    • cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*range: 7.6.0
    • (no CPE)range: 7.6.0 through 7.6.1, 7.4.1 through 7.4.3
  • Fortinet/Fortimanager Cloud3 versions
    cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.4
    • cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*range: 7.4.1
    • (no CPE)range: 7.4.1 through 7.4.3
  • Fortinet/Fortiproxy3 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=1.0.0,<7.0.19
    • cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions
  • Fortinet/FortiRecorder
    cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*
    Range: >=7.0.0,<7.0.5
  • Fortinet/Fortivoice
    cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*
    Range: >=6.0.0,<=6.4.10
  • Fortinet/Fortiweb2 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=6.4.0,<7.4.5
    • cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*
  • Fortinet/Fortios3 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.4.0,<6.4.16
    • cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.