[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGUsiXHMgWaBGUwKESIvc_iBGP-mjCNf9PO46dW1OY0U":3,"g5a-risk:CVE-2024-40588":171},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":58,"references":59,"referencesCount":65,"weaknesses":66,"weaknessesCount":65,"isActivelyExploited":45,"cisaInfo":27,"otxData":27,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":159,"notableEvents":160},"CVE-2024-40588","What is CVE-2024-40588?","Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiMail version 7.6.0 through 7.6.1 and before 7.4.3, FortiVoice version 7.0.0 through 7.0.5 and before 7.4.9, FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4, FortiCamera  & FortiNDR version 7.6.0 and before 7.4.6 may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests.","Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiMail version 7.6.0 through 7.6.1 and before 7.4.3, FortiVoice version 7.0.0 throug...","2025-08-12T19:15:27.397","2025-08-14T01:14:41.25",4.4,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","HIGH","NONE","UNCHANGED","MEDIUM",null,0.8,3.6,[],[],0.00175,[32,32,32,32,32,32,32],"Medium",[36,41,46,49,52,55],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"fortinet","forticamera_firmware","*","cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:*",{"vendor":37,"product":42,"version":43,"criteria":44,"vulnerable":45},"forticamera","-","cpe:2.3:h:fortinet:forticamera:-:*:*:*:*:*:*:*",false,{"vendor":37,"product":47,"version":39,"criteria":48,"vulnerable":4},"fortimail","cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*",{"vendor":37,"product":50,"version":39,"criteria":51,"vulnerable":4},"fortindr","cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*",{"vendor":37,"product":53,"version":39,"criteria":54,"vulnerable":4},"fortirecorder","cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*",{"vendor":37,"product":56,"version":39,"criteria":57,"vulnerable":4},"fortivoice","cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*",6,[60],{"url":61,"source":62,"tags":63},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-24-309","Fortinet",[64],"Vendor Advisory",1,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-23","Relative Path Traversal","The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as \"..\" that can resolve to a location that is outside of that directory.","This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.","Draft","Base","Simple",[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2024-40588? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-40588, a medium severity cyber security vulnerability from 2025. Multiple relative path traversal vulnerabilities [CWE-23]...","CVE-2024-40588, CVE-2024-40588 vulnerability, CVE-2024-40588 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, fortinet security, forticamera_firmware vulnerability, forticamera vulnerability, fortimail vulnerability, fortindr vulnerability, fortirecorder vulnerability","\u002Fwhat-is\u002Fcve-2024-40588",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-40588","Cybersecurity","CVE-2024-40588, CVE-2024-40588 vulnerability, CVE-2024-40588 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102,116,128,138,149],{"Operator":103,"Negate":27,"Nodes":104},"AND",[105,112],{"Operator":106,"Negate":45,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":110,"VersionEndExcluding":27,"VersionEndIncluding":111},"92731966-B8E2-4AE4-8BC0-FA65DBE33D98","2.0.0","2.1.4",{"Operator":106,"Negate":45,"CPEMatch":113},[114],{"Vulnerable":45,"Criteria":44,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CFB863FD-5593-4620-8740-4EB692EA58E1",{"Operator":27,"Negate":27,"Nodes":117},[118],{"Operator":106,"Negate":45,"CPEMatch":119},[120,124],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":27},"1D685B2E-54A0-4D38-B93C-752632C1290A","6.4.0","7.4.4",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":27},"F48F8EA0-53FE-41F3-8C6E-169B8CE6FBD7","7.6.0","7.6.2",{"Operator":27,"Negate":27,"Nodes":129},[130],{"Operator":106,"Negate":45,"CPEMatch":131},[132,136],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":27},"F9C702F2-89AB-43EA-99AD-BDA2ADE8AB6B","7.0.0","7.4.7",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":27},"3D2E2C35-DCD7-45AA-B70D-A92FA186285C",{"Operator":27,"Negate":27,"Nodes":139},[140],{"Operator":106,"Negate":45,"CPEMatch":141},[142,145],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":122,"VersionEndExcluding":144,"VersionEndIncluding":27},"152C9FCA-912A-4CE5-A3F7-3F3DE0F2825C","7.0.5",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":147,"VersionEndExcluding":148,"VersionEndIncluding":27},"C0B0D078-2F52-46B4-B9C0-162447828E1B","7.2.0","7.2.2",{"Operator":27,"Negate":27,"Nodes":150},[151],{"Operator":106,"Negate":45,"CPEMatch":152},[153,157],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":155,"VersionEndExcluding":156,"VersionEndIncluding":27},"BC0CF97D-D86C-4D83-B787-1E251FE73995","6.0.0","6.4.10",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":134,"VersionEndExcluding":144,"VersionEndIncluding":27},"C22B8401-8893-474D-AB9E-42C3F2EF79CE",[],[161],{"id":162,"eventType":163,"eventTime":164,"details":165,"label":166,"color":167},"1448e714-4b25-4904-8c24-4f4b78d4f866","NEW_NVD","2025-08-13T04:01:11.547897+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":169,"version":170},1792450304806,"2.0",{"score":172,"band":173,"action":174,"scoredAt":175},17,"Info","Track","2026-10-16T07:08:25.32656+00:00"]