Skip to content
Sign in
7.3 High

CVE-2023-42783 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through…

Description

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.

Affected products and versions

Product Affected versions Fixed in
FortiWLM 8.6 8.6.0 → 8.6.6 No fix stated
FortiWLM 8.5 8.5.0 → 8.5.4 No fix stated
FortiWLM 8.4 8.4.0 → 8.4.2 No fix stated
FortiWLM 8.3 8.3.0 → 8.3.2 No fix stated
FortiWLM 8.2.2 No fix stated

Other CVEs of FortiWLM

The 14 CVEs of FortiWLM →
CVE-2023-34990 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to… 9.6 Critical CVE-2023-48782 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM… 8.6 High CVE-2023-34991 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version… 9.3 Critical CVE-2023-36548 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM… 9.6 Critical
Track this CVE