CVE-2016-4966

CVE-2016-4966

EPSS 2.2%

The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities https://www.kb.cert.org/vuls/id/724487 http://www.securityfocus.com/bid/92781