CVE-2021-42753
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.x, 6.1.x, 6.0.x, 5.9.x and 5.8.x may allow an authenticated attacker to perform an arbitrary file and directory deletion in the device filesystem.
Una limitación inapropiada de un nombre de ruta a un directorio restringido ("Path Traversal") vulnerabilidad [CWE-22] en la interfaz de administración de FortiWeb versiones 6.4.1 y anteriores, versiones 6.3.15 y anteriores, versiones 6.2.x, 6.1.x, 6.0.x, 5.9.x y 5.8.x, puede permitir a un atacante autenticado llevar a cabo una eliminación arbitraria de archivos y directorios en el sistema de archivos del dispositivo
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2021-10-20 CVE Reserved
- 2022-02-02 CVE Published
- 2023-08-26 EPSS Updated
- 2024-10-22 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://fortiguard.com/psirt/FG-IR-21-158 | 2022-02-07 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Fortinet Search vendor "Fortinet" | Fortiweb Search vendor "Fortinet" for product "Fortiweb" | >= 5.8.0 < 6.3.16 Search vendor "Fortinet" for product "Fortiweb" and version " >= 5.8.0 < 6.3.16" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortiweb Search vendor "Fortinet" for product "Fortiweb" | >= 6.4.0 < 6.4.2 Search vendor "Fortinet" for product "Fortiweb" and version " >= 6.4.0 < 6.4.2" | - |
Affected
|