Fortinet FortiManager, FortiOS, and FortiProxy Path Traversal Vulnerability Allowing Privilege Escalation

A path traversal vulnerability has been identified in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, and FortiProxy versions 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, and 1.0.0 through 1.0.7. This vulnerability allows attackers to escalate privileges by sending specially crafted packets, exploiting improper restrictions on file paths that could lead to unauthorized access to restricted directories.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected system.