एक प्रतिबंधित निर्देशिका में पथ नाम की अनुचित सीमा ('पथ पारगमन') Fortinet FortiManager 7.6.0 से 7.6.1, FortiManager 7.4.1 से 7.4.3, FortiManager Cloud 7.4.1 में एक भेद्यता

Successful exploitation of CVE-2024-48884 allows a remote, authenticated attacker to bypass intended access controls and read arbitrary files on the FortiProxy appliance. This could include configuration files, sensitive data, or even system files, depending on the attacker's privileges and the system's configuration. The potential impact ranges from information disclosure to complete system compromise, enabling attackers to modify configurations, escalate privileges, or launch further attacks against internal networks. While requiring authentication, the ease of traversal makes it a significant risk, particularly in environments with weak password policies or compromised user accounts.

Organizations using FortiProxy in environments with weak authentication or exposed to external networks are particularly at risk. Shared hosting environments where multiple users share a single FortiProxy instance are also vulnerable, as a compromise of one user's account could potentially lead to access for other users. Legacy FortiProxy deployments running older, unpatched versions are especially susceptible.

• fortinet: Monitor FortiProxy logs for unusual file access attempts or requests containing directory traversal sequences (e.g., ../). • linux / server: Use lsof to identify processes accessing unexpected files or directories. Example:

lsof | grep /path/to/sensitive/file

• generic web: Use curl to test for path traversal vulnerabilities by appending directory traversal sequences to URLs. Example:

curl 'http://fortiproxy/../../../../etc/passwd'

• windows: Use PowerShell to check for suspicious processes or scheduled tasks that might be exploiting the vulnerability. Example:

Get-Process | Where-Object {$_.ProcessName -like '*suspicious*'}

1. 2025-01-14Disclosure

   disclosure

1. आरक्षित2024-10-09
2. प्रकाशित2025-01-14
3. संशोधित2026-01-14
4. EPSS अद्यतन2026-04-02

The primary mitigation for CVE-2024-48884 is to upgrade FortiProxy to a patched version. Fortinet has released updates to address this vulnerability. If immediate patching is not possible due to compatibility concerns or testing requirements, consider implementing temporary workarounds. These may include restricting access to the vulnerable endpoint, implementing stricter authentication controls, and reviewing file permissions to limit the potential impact of a successful exploit. Web application firewalls (WAFs) configured to detect and block path traversal attempts can also provide an additional layer of defense. After upgrade, confirm the vulnerability is resolved by attempting a path traversal request and verifying that access is denied.