This vulnerability involves improper limitation of a pathname to a restricted directory (path traversal) in Fortinet FortiManager and related products. It enables remote attackers, either authenticated with access to the security fabric interface or unauthenticated, to perform unauthorized file write or folder deletion operations. The affected products include FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS versions 6.4.0 through 7.6.0 (various subversions), and FortiProxy versions 1.0 through 7.4.5 including all versions of some minor releases. The vulnerability has a CVSS v3.1 base score of 7.1, indicating high severity. An official fix is available from Fortinet.

The vulnerability allows remote attackers to escalate privileges by writing arbitrary files or deleting arbitrary folders on affected systems. This can lead to denial of service or unauthorized modification of system files, potentially disrupting operations or enabling further attacks. The impact is rated high due to the ability to affect system availability and integrity without requiring user interaction.

An official fix is available from Fortinet to remediate this vulnerability. Users should apply the vendor-provided patches or updates for the affected Fortinet products as soon as possible. Since this is not a cloud service, remediation requires updating the on-premises software versions. No additional mitigation steps are specified by the vendor advisory.