Vulnerability Details CVE-2016-4966
The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 84.0%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
- http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf
- http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
- http://www.securityfocus.com/bid/92781
- https://www.kb.cert.org/vuls/id/724487
- http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf
- http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
- http://www.securityfocus.com/bid/92781
- https://www.kb.cert.org/vuls/id/724487
Products affected by CVE-2016-4966
-
cpe:2.3:a:fortinet:fortiwan:-
-
cpe:2.3:a:fortinet:fortiwan:4.1.1
-
cpe:2.3:a:fortinet:fortiwan:4.1.2
-
cpe:2.3:a:fortinet:fortiwan:4.1.3
-
cpe:2.3:a:fortinet:fortiwan:4.2.1
-
cpe:2.3:a:fortinet:fortiwan:4.2.2
-
cpe:2.3:a:fortinet:fortiwan:4.2.4