Vulnerability Details CVE-2016-4966
The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 80.1%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
- http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf
- http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
- http://www.securityfocus.com/bid/92781
- https://www.kb.cert.org/vuls/id/724487
- http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf
- http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
- http://www.securityfocus.com/bid/92781
- https://www.kb.cert.org/vuls/id/724487
Products affected by CVE-2016-4966
-
cpe:2.3:a:fortinet:fortiwan:-
-
cpe:2.3:a:fortinet:fortiwan:4.1.1
-
cpe:2.3:a:fortinet:fortiwan:4.1.2
-
cpe:2.3:a:fortinet:fortiwan:4.1.3
-
cpe:2.3:a:fortinet:fortiwan:4.2.1
-
cpe:2.3:a:fortinet:fortiwan:4.2.2
-
cpe:2.3:a:fortinet:fortiwan:4.2.4