Fortinet FortiVoice Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in Fortinet FortiVoice versions 7.2.0 to 7.2.2 and 7.0.0 to 7.0.7. This vulnerability allows a privileged attacker to delete files from the underlying filesystem by sending crafted HTTP or HTTPS requests.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of files from the system.

Remediation

Users can upgrade to Fortinet FortiVoice version 7.2.3 or above for the 7.2.x series, and to version 7.0.8 or above for the 7.0.x series.