PSIRT Advisories
FortiAP-U - Relative path traversal vulnerability in CLI
Summary
A path traversal vulnerability [CWE-22] in FortiAP-U CLI may allow an admin user to delete and access unauthorized files and data via specifically crafted CLI commands.
Affected Products
FortiAP-U version 6.2.0 through 6.2.3FortiAP-U version 6.0.0 through 6.0.4
FortiAP-U version 5.4.0 through 5.4.6
Solutions
Please upgrade to FortiAP-U 6.2.4 or above.