PT-2016-6198 · Fortinet · Fortiwan

Fan-Syun Shih + 2 · Published 2016-09-21 · Updated 2016-09-21 · CVE-2016-4966

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiWan versions prior to 4.2.5

Description The issue concerns the diagnosis control.php page, where remote authenticated users can download PCAP files. This is related to the UserName GET parameter.

Recommendations For versions prior to 4.2.5, update to version 4.2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the diagnosis control.php page until the update is applied. Avoid using the UserName parameter in the affected page to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2016-4966

Affected Products

Fortiwan

References · 6

• https://osv.dev/vulnerability/CVE-2016-4966 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4966 · Security Note
• https://kb.cert.org/vuls/id/724487 · Note
• http://securityfocus.com/bid/92781 · Note
• http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf · Note
• http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities · Note