5.4
Moyenne
CVE-2021-43070 Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and…
Description
Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fortinet FortiWLM | Versions non publiées |
Références
- fortiguard.com fortiguard.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Fortinet FortiWLM
Les 8 CVE de Fortinet FortiWLM →
CVE-2021-43077
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version…
8.8
Élevée
CVE-2021-43075
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…
8.8
Élevée
CVE-2021-42752
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version…
5.4
Moyenne
CVE-2021-42760
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version…
8.8
Élevée