---
id: CVE-2022-42476
title: >-
  A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet
  FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0
  through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1,
  FortiProxy 7…
summary: >-
  A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet
  FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0
  through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1,
  FortiProxy 7…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-23
vendor: Fortinet
product: FortiOS
affected:
  - FortiOS >= 7.2.0 <= 7.2.3
  - FortiOS >= 7.0.0 <= 7.0.8
  - FortiOS >= 6.4.0 <= 6.4.11
  - FortiOS >= 6.2.0 <= 6.2.12
  - FortiProxy >= 7.2.0 <= 7.2.1
  - FortiProxy >= 7.0.0 <= 7.0.7
  - FortiProxy >= 2.0.0 <= 2.0.11
  - FortiProxy >= 1.2.1 <= 1.2.13
  - FortiProxy 01.02.00
  - FortiProxy >= 1.1.4 <= 1.1.6
  - FortiProxy >= 01.01.00 <= 01.01.03
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-10-23T14:11:27.802267Z'
published: '2023-03-07'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T13:48:27.328Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-42476'
references:
  - url: 'https://fortiguard.com/psirt/FG-IR-22-401'
    label: 'https://fortiguard.com/psirt/FG-IR-22-401'
tags:
  - cve.org
epss: 0.00218
epssPercentile: 0.12209
ingestedAt: '2026-10-22T22:00:50.272Z'
---

## Overview

A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0.0 through 2.0.11, FortiProxy 1.2 all versions, FortiProxy 01.02 all versions, FortiProxy 1.1 all versions, FortiProxy 01.01 all versions allows privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests.

## Affected

- `FortiOS >= 7.2.0 <= 7.2.3`
- `FortiOS >= 7.0.0 <= 7.0.8`
- `FortiOS >= 6.4.0 <= 6.4.11`
- `FortiOS >= 6.2.0 <= 6.2.12`
- `FortiProxy >= 7.2.0 <= 7.2.1`
- `FortiProxy >= 7.0.0 <= 7.0.7`
- `FortiProxy >= 2.0.0 <= 2.0.11`
- `FortiProxy >= 1.2.1 <= 1.2.13`
- `FortiProxy 01.02.00`
- `FortiProxy >= 1.1.4 <= 1.1.6`
- `FortiProxy >= 01.01.00 <= 01.01.03`

## Remediation

Upgrade to FortiProxy version 7.2.2 or above
Upgrade to FortiProxy version 7.0.8 or above
Upgrade to FortiProxy version 2.0.12 or above
Upgrade to FortiOS version 7.2.4 or above
Upgrade to FortiOS version 7.0.9 or above
Upgrade to FortiOS version 6.4.12 or above
Upgrade to FortiOS version 6.2.13 or above