CVE-2024-36512

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
Fortinet	FortiManager	>= 7.4.0, <= 7.4.3; >= 7.2.0, <= 7.2.5; >= 7.0.2, <= 7.0.12; >= 6.2.10, <= 6.2.13
Fortinet	FortiAnalyzer	>= 7.4.0, <= 7.4.3; >= 7.2.0, <= 7.2.5; >= 7.0.2, <= 7.0.12; >= 6.2.10, <= 6.2.13

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-152Vendor Advisory

Timeline

Published: Jan 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-365138.8A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 al CVE-2024-365148.8Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.CVE-2024-365158.8Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerabil CVE-2024-365168.8Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerabil CVE-2024-365178.8Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.CVE-2024-365185.4Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.CVE-2024-36526.5The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer CVE-2024-365229.8The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an CVE-2024-365236.5An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or CVE-2024-365269.8ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.CVE-2024-365276.5puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol CVE-2024-365288.8nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /ad