An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.
- OSAny OS
- VersionAny Version
- TypeAny Type
2 fixes found:
- Published Date:May 24, 2019Updated Date:May 24, 2019
FortiGaurd Labs advisory FG-IR-18-384Published Date:May 24, 2019Updated Date:May 24, 2019