Skip to content
fr Sign in
8.1 High

CVE-2023-44251 ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal')…

Description

** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via crafted HTTP or HTTPs requests.

Affected products and versions

Product Affected versions Fixed in
FortiWAN 5.2 5.2.0 → 5.2.1 No fix stated
FortiWAN 5.1 5.1.1 → 5.1.2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiWAN

The 5 CVEs of FortiWAN →
CVE-2021-26102 A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a… 9.8 Critical CVE-2021-26115 An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a… 7.6 High CVE-2023-44252 ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0… 8.6 High CVE-2022-33869 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management… 8.0 High
Track this CVE