CVE-2023-34990: Path Traversal
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiWLMto a version that resolves this vulnerability.Fixed in 8.5.5 - Upgrade
Upgrade
Fortinet FortiWLMto a version that resolves this vulnerability.Fixed in 8.6.6
Event History
Frequently Asked Questions
What is the severity of CVE-2023-34990?
CVE-2023-34990 is considered a critical vulnerability due to its potential to allow unauthorized code execution.
How do I fix CVE-2023-34990?
To mitigate CVE-2023-34990, upgrade Fortinet FortiWLM to version 8.6.6 or later, or 8.5.5 or later.
What versions are affected by CVE-2023-34990?
CVE-2023-34990 affects Fortinet FortiWLM versions 8.6.0 to 8.6.5 and 8.5.0 to 8.5.4.
What attack vector does CVE-2023-34990 exploit?
CVE-2023-34990 exploits a relative path traversal vulnerability that can lead to unauthorized code execution.
What are the potential impacts of CVE-2023-34990?
The impacts of CVE-2023-34990 include execution of unauthorized commands, which may compromise the security of the affected systems.