CVE-2023-44251: Path Traversal
First published: Wed Dec 13 2023(Updated: )
** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via crafted HTTP or HTTPs requests.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiWan | =5.1.1 | |
| Fortinet FortiWan | =5.1.2 | |
| Fortinet FortiWan | =5.2.0 | |
| Fortinet FortiWan | =5.2.1 |
Remedy
This product is end of life and no longer supported. Please consider replacing with an equivalent FortiGate appliance as approriate.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-api
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet fortiwan
- version/fortinet fortiwan/5.1.1
- version/fortinet fortiwan/5.1.2
- version/fortinet fortiwan/5.2.0
- version/fortinet fortiwan/5.2.1