Aller au contenu
en Se connecter
8.1 Élevée

CVE-2023-44251 ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal')…

Description

** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via crafted HTTP or HTTPs requests.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiWAN 5.2 5.2.0 → 5.2.1 Pas de correctif indiqué
FortiWAN 5.1 5.1.1 → 5.1.2 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FortiWAN

Les 5 CVE de FortiWAN →
CVE-2021-26102 A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a… 9.8 Critique CVE-2021-26115 An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a… 7.6 Élevée CVE-2023-44252 ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0… 8.6 Élevée CVE-2022-33869 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management… 8.0 Élevée
Suivre cette CVE