Threats tagged 'ghsa-334f-4cmc-9wv3'

A path traversal vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.6.x and 8.0.x releases. This flaw allows an authenticated attacker with administrative privileges to execute unauthorized code or commands by sending crafted requests. The vulnerability affects versions FortiAnalyzer 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1, FortiManager 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1, and FortiManager Cloud 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1. The CVSS v3.1 base score is 7.2, indicating a high severity vulnerability. No public exploits or patches are currently documented in the provided data.