CPE Details
Fortinet FortiRecorder 6.4.3
6.4.3
2025-02-03
12h12 +00:00
12h12 +00:00
2025-02-03
12h12 +00:00
12h12 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*
Informations
Vendor
fortinetProduct
fortirecorderVersion
6.4.3Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests. | 5.5 |
Moyen |
||
| A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests. | 6 |
Moyen |
||
| An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0.0 and 6.4.0 through 6.4.4 allows attacker to execute unauthorized code or commands via the CLI. | 6.7 |
Moyen |
