Vulnerability Details CVE-2022-30301
A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 may allow an admin user to delete and access unauthorized files and data via specifically crafted CLI commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.1%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-30301
-
cpe:2.3:a:fortinet:fortiap-u:5.4.0
-
cpe:2.3:a:fortinet:fortiap-u:5.4.3
-
cpe:2.3:a:fortinet:fortiap-u:5.4.4
-
cpe:2.3:a:fortinet:fortiap-u:5.4.5
-
cpe:2.3:a:fortinet:fortiap-u:5.4.6
-
cpe:2.3:a:fortinet:fortiap-u:6.0.0
-
cpe:2.3:a:fortinet:fortiap-u:6.0.1
-
cpe:2.3:a:fortinet:fortiap-u:6.0.2
-
cpe:2.3:a:fortinet:fortiap-u:6.0.3
-
cpe:2.3:a:fortinet:fortiap-u:6.0.4
-
cpe:2.3:a:fortinet:fortiap-u:6.2.0
-
cpe:2.3:a:fortinet:fortiap-u:6.2.2
-
cpe:2.3:a:fortinet:fortiap-u:6.2.3