← Database

CVE-2024-52964

MEDIUM CVSS: 5.5 Published: 2025-08-12 Modified: 2026-06-17

Description

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9 and below 7.0.13 & FortiManager Cloud version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5 and before 7.2.9 allows an authenticated remote attacker to overwrite arbitrary files via FGFM crafted requests.

Affected Platforms

Fortinet Fortimanager CloudFortinet Fortimanager

Weakness Type

CWE-22

References