Skip to content
Sign in
6.5 Medium

CVE-2022-30302 Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x,…

Description

Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated attacker to retrieve and delete arbitrary files from the underlying filesystem via specially crafted web requests.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiDeceptor Versions not published

Other CVEs of Fortinet FortiDeceptor

The 3 CVEs of Fortinet FortiDeceptor →
CVE-2022-38373 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management… 8.0 High CVE-2020-6644 An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the… Not rated
Track this CVE