Lucene search

K
fortinetFortiGuard LabsFG-IR-22-460
HistoryFeb 16, 2023 - 12:00 a.m.

FortiWeb - Unauthorized Configuration Download Vulnerability

2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
24
fortiweb
configuration files
vulnerability
http request
local attacker
cwe-285

EPSS

0

Percentile

5.1%

An unauthorized configuration download vulnerability [CWE-285] in FortiWeb may allow a local attacker to access confidential configuration files via a crafted http request.

EPSS

0

Percentile

5.1%

Related for FG-IR-22-460