| Package | Affected versions | Patched versions |
|---|---|---|
| fortiproxy | = 7.2.0= 7.2.1≥ 1.0.0, ≤ 1.0.7≥ 1.1.0, ≤ 1.1.6≥ 1.2.0, ≤ 1.2.13≥ 2.0.0, ≤ 2.0.11≥ 7.0.0, ≤ 7.0.7 | |
| fortiswitchmanager | = 7.0.0= 7.0.1= 7.2.0= 7.2.1 |
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free