Path Traversal Vulnerabilities in Fortinet FortiMail, FortiVoice, and FortiRecorder Products

CVE-2024-40588

What is CVE-2024-40588?

Multiple relative path traversal vulnerabilities in several Fortinet products can be exploited by a privileged attacker. These vulnerabilities allow unauthorized access to sensitive files on the underlying filesystem through specially crafted CLI requests, posing a serious security risk to affected systems. Users are encouraged to apply the necessary patches and updates to mitigate these risks.

References