CPE Details
Fortinet FortiAnalyzer 7.2.6
7.2.6
2025-01-21
12h47 +00:00
12h47 +00:00
2025-01-21
12h47 +00:00
12h47 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*
Informations
Vendor
fortinetProduct
fortianalyzerVersion
7.2.6Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests. | 2.3 |
Low |
||
| An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests. | 4.1 |
Medium |
