CVE-2021-43070: Path Traversal
Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43070?
CVE-2021-43070 is a vulnerability in the FortiWLM management interface that allows an authenticated attacker to retrieve arbitrary files from the underlying filesystem using specially crafted web requests.
Which versions of FortiWLM are affected by CVE-2021-43070?
FortiWLM 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, and 8.2.2 are affected by CVE-2021-43070.
How can an attacker exploit CVE-2021-43070?
An attacker can exploit CVE-2021-43070 by sending specially crafted web requests to the FortiWLM management interface.
What is the severity of CVE-2021-43070?
CVE-2021-43070 has a severity rating of 6.5 (medium).
How can I mitigate CVE-2021-43070?
To mitigate CVE-2021-43070, it is recommended to apply the necessary patches provided by Fortinet and update to a non-vulnerable version of FortiWLM.