CVE-2022-30302 MEDIUM

CVE-2022-30302

Vendor Fortinet
Product Fortinet FortiDeceptor
Published July 18, 2022
Last update October 22, 2024

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C

What the vulnerability does

01Description

Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated attacker to retrieve and delete arbitrary files from the underlying filesystem via specially crafted web requests.

Key dates

02Disclosure timeline

July 18, 2022 CVE published
October 22, 2024 Record updated