CVE-2021-26102: Path Traversal
A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26102?
CVE-2021-26102 is considered a high severity vulnerability due to its potential impact on system integrity.
How do I fix CVE-2021-26102?
To fix CVE-2021-26102, upgrade FortiWAN to version 4.5.8 or later.
Who is affected by CVE-2021-26102?
CVE-2021-26102 affects FortiWAN versions 4.5.7 and below, as well as all versions of 4.4.
What type of vulnerability is CVE-2021-26102?
CVE-2021-26102 is a relative path traversal vulnerability (CWE-23).
What can an attacker do with CVE-2021-26102?
An attacker exploiting CVE-2021-26102 can delete system files, including specific configuration files that may reset the Admin password.