Fortinet Products Path Traversal Vulnerability Allowing File Deletion via CLI

A path traversal vulnerability has been identified in multiple Fortinet products, including FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. This vulnerability allows a privileged attacker to delete files from the underlying filesystem by sending crafted CLI requests. The issue arises from an improper restriction of pathnames, enabling unauthorized file deletion.

Impact

Exploitation of this vulnerability could lead to unauthorized file deletion from the system's filesystem.

Remediation

Users can upgrade FortiAnalyzer to version 7.6.5 or 7.4.8, depending on their current version. FortiManager users should upgrade to the same respective versions. FortiAnalyzer Cloud and FortiManager Cloud users can also upgrade to the latest versions. For those on FortiAnalyzer or FortiManager 7.2 or 7.0, migration to a fixed release is recommended.