CVE-2022-42474
Assigner: fortinet
Published: 2023-06-13T08:41:42.277Z
State: PUBLISHED
affected: vendor: Fortinet
product: FortiSwitchManager
defaultStatus: unaffected
versions: versionType: semver
version: 7.2.0
lessThanOrEqual: 7.2.1
status: affected
versionType: semver
version: 7.0.0
lessThanOrEqual: 7.0.1
status: affected
vendor: Fortinet
product: FortiProxy
defaultStatus: unaffected
versions: versionType: semver
version: 7.2.0
lessThanOrEqual: 7.2.1
status: affected
versionType: semver
version: 7.0.0
lessThanOrEqual: 7.0.7
status: affected
versionType: semver
version: 2.0.0
lessThanOrEqual: 2.0.11
status: affected
versionType: semver
version: 1.2.0
lessThanOrEqual: 1.2.13
status: affected
versionType: semver
version: 1.1.0
lessThanOrEqual: 1.1.6
status: affected
versionType: semver
version: 1.0.0
lessThanOrEqual: 1.0.7
status: affected
vendor: Fortinet
product: FortiOS
defaultStatus: unaffected
versions: versionType: semver
version: 7.2.0
lessThanOrEqual: 7.2.3
status: affected
versionType: semver
version: 7.0.0
lessThanOrEqual: 7.0.9
status: affected
versionType: semver
version: 6.4.0
lessThanOrEqual: 6.4.12
status: affected
versionType: semver
version: 6.2.0
lessThanOrEqual: 6.2.15
status: affected
descriptions: value: A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.
problemTypes: descriptions: cweId: CWE-23
description: Execute unauthorized code or commands
type: CWE
metrics: format: CVSS
cvssV3_1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:X/RC:C
solutions: value: Please upgrade to FortiOS version 7.4.0 or above
Please upgrade to FortiOS version 7.2.4 or above
Please upgrade to FortiOS version 7.0.10 or above
Please upgrade to FortiOS version 6.4.13 or above
Please upgrade to FortiSwitchManager version 7.2.2 or above
Please upgrade to FortiSwitchManager version 7.0.2 or above
Please upgrade to FortiProxy version 7.2.2 or above
Please upgrade to FortiProxy version 7.0.8 or above
Please upgrade to FortiProxy version 2.0.12 or above