| IR Number | FG-IR-23-069 |
| Date | May 3, 2023 |
| Component | CLI |
| Severity |
Medium |
| CVSSv3 Score | 5.7 |
| Impact | Execute unauthorized code or commands |
| CVE ID | CVE-2023-27993 |
| Affected Products |
FortiADC
:
7.2.0, 7.1.1, 7.1.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiADC - Path traversal vulnerability in CLI
Summary
A relative path traversal vulnerability [CWE-23] in FortiADC may allow a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands.
Affected Products
FortiADC version 7.2.0FortiADC version 7.1.0 through 7.1.1
FortiADC 7.0 all versions
FortiADC 6.2 all versions
FortiADC 6.1 all versions
FortiADC 6.0 all versions
FortiADC 5.4 all versions
FortiADC 5.3 all versions
FortiADC 5.2 all versions
Solutions
Please upgrade to FortiADC version 7.2.1 or abovePlease upgrade to FortiADC version 7.1.2 or above