Design/Logic Flaw

The diagnosiscontrol.php page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter...

Server side request forgery (ssrf)

The linkreport/tmp/adminglobal page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request...

Code injection

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to obtain sensitive information from 1 a backup of the device configuration via script/cfgshow.php or 2 PCAP files via script/system/tcpdump.php...

Deserialization of untrusted data

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosiscontrol.php...

CVE-2016-4965

Fortinet FortiWan (AscernLink) before 4.2.5 is vulnerable to OS command injection via the graph parameter to diagnosis_control.php, allowing a remote authenticated user with access to nslookup to run commands as root. The vulnerability affects FortiWan’s web interface; the CVSS base metrics indic...

CVE-2016-4965

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosiscontrol.php...

CVE-2016-4969

Cross-site scripting XSS vulnerability in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php...

CVE-2016-4968

The linkreport/tmp/adminglobal page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request...

CVE-2016-4967

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to obtain sensitive information from 1 a backup of the device configuration via script/cfgshow.php or 2 PCAP files via script/system/tcpdump.php...

CVE-2016-4969

CVE-2016-4969 is a Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWAN (formerly AscernLink) before version 4.2.5. The flaw allows remote attackers to inject arbitrary web script or HTML via the IP parameter to /script/statistics/getconn.php. Fortinet’s advisory and release notes for Fo...

CVE-2016-4968

CVE-2016-4968 affects Fortinet FortiWAN (FortiWan) before 4.2.5. An authenticated but non-admin user can issue a GET request to the path /linkreport/tmp/admin_global and obtain an administrator cookie, enabling elevation of access. The vulnerability is an information disclosure flaw in the linkre...

CVE-2016-4967

Fortinet FortiWAN (AscernLink) before 4.2.5 is affected by CVE-2016-4967: an authenticated non-admin user can disclose sensitive data by accessing /script/cfg_show.php to grab a device configuration backup or /script/system/tcpdump.php to obtain a PCAP. The issue is confirmed across multiple sour...

CVE-2016-4966

CVE-2016-4966 affects Fortinet FortiWAN (FortiWAN/AscernLink) prior to 4.2.5. The diagnosis_control.php page permits a remote authenticated user to download PCAP files by manipulating the UserName GET parameter, exploiting the tcpdump function and enabling access to captured data. The issue is pa...

CVE-2016-4966

The diagnosiscontrol.php page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter...

Fortinet FortiAnalyzer Persistent XSS Vulnerability (FG-IR-16-014)

Fortinet Fortianalyzer is prone to a persistent cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2016-4573

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE...

Authentication flaw

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE...

CVE-2016-4573

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE...

Fortinet FortiWAN Authentication Bypass Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. A security vulnerability exists in the tcpdump function in the diagnosiscontrol.php page in Fortinet FortiWAN. An attacker can exploit this vulnerability by changing the HTTP Get parameter 'UserName' to 'Administrator' ...

Fortinet FortiWAN Information Disclosure Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by executing a GET request on the /linkreport/tmp/adminglobal page to obtain an administrator login cookie...