Directory Traversal Vulnerability Affecting FortiManager and FortiAnalyzer
A directory traversal vulnerability has been identified within Fortinet FortiManager and FortiAnalyzer solutions. An authenticated operator with limited permissions could exploit this flaw to write or modify critical system files.
Description
Technical context and vulnerability details
Fortinet FortiManager handles centralized deployment and synchronization of security configurations, while FortiAnalyzer centralizes log collection, archival, and forensic investigation across the infrastructure.
These products are affected by the following vulnerabilities:
CVE-2024-36512: Relative path traversal vulnerability (CWE-23) in file upload and resource management mechanisms. It allows an authenticated user to escape their assigned directory to write arbitrary files onto the appliance. Classified High with a CVSS v3.1 base score of 7.8.
Potential Risks & Impact
Potential consequences upon exploitation
- Arbitrary file write and modification on the host file system;
- Potential compromise of the central management platform's integrity;
- Impact on the integrity and auditability of monitoring operations.
Affected systems
Products, components and targeted versions
- FortiAnalyzer 7.4: versions 7.4.0 to 7.4.3;
- FortiAnalyzer 7.2: versions 7.2.0 to 7.2.5;
- FortiAnalyzer 7.0: versions 7.0.2 to 7.0.12;
- FortiManager 7.4: versions 7.4.0 to 7.4.3;
- FortiManager 7.2: versions 7.2.0 to 7.2.5;
- FortiManager 7.0: versions 7.0.2 to 7.0.12.
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Upgrade FortiManager and FortiAnalyzer 7.4 to version 7.4.4 or higher;
- Upgrade FortiManager and FortiAnalyzer 7.2 to version 7.2.6 or higher;
- Upgrade FortiManager and FortiAnalyzer 7.0 to version 7.0.13 or higher;
- Review administrator profiles and revoke non-essential access permissions.
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.