Skip to content
fr Sign in
6.2 Medium

CVE-2022-42474 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0…

Description

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
FortiSwitchManager 7.2 7.2.0 → 7.2.1 No fix stated
FortiSwitchManager 7.0 7.0.0 → 7.0.1 No fix stated
FortiProxy 7.2 7.2.0 → 7.2.1 No fix stated
FortiProxy 7.0 7.0.0 → 7.0.7 No fix stated
FortiProxy 2.0 2.0.0 → 2.0.11 No fix stated
FortiProxy 1.2 1.2.0 → 1.2.13 No fix stated
FortiProxy 1.1 1.1.0 → 1.1.6 No fix stated
FortiProxy 1.0 1.0.0 → 1.0.7 No fix stated
FortiOS 7.2 7.2.0 → 7.2.3 No fix stated
Show the 3 other branches
Product Affected versions Fixed in
FortiOS 7.0 7.0.0 → 7.0.9 No fix stated
FortiOS 6.4 6.4.0 → 6.4.12 No fix stated
FortiOS 6.2 6.2.0 → 6.2.15 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiSwitchManager

The 20 CVEs of FortiSwitchManager →
CVE-2026-59840 A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all… 4.1 Medium CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability 5.4 Medium CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability 7.4 High CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability 9.1 Critical
Track this CVE