Server side request forgery (ssrf)

The linkreport/tmp/adminglobal page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request...

Code injection

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to obtain sensitive information from 1 a backup of the device configuration via script/cfgshow.php or 2 PCAP files via script/system/tcpdump.php...

Deserialization of untrusted data

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosiscontrol.php...

CVE-2016-4965

Fortinet FortiWan (AscernLink) before 4.2.5 is vulnerable to OS command injection via the graph parameter to diagnosis_control.php, allowing a remote authenticated user with access to nslookup to run commands as root. The vulnerability affects FortiWan’s web interface; the CVSS base metrics indic...

CVE-2016-4969

Cross-site scripting XSS vulnerability in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php...

CVE-2016-4965

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosiscontrol.php...

CVE-2016-4966

CVE-2016-4966 affects Fortinet FortiWAN (FortiWAN/AscernLink) prior to 4.2.5. The diagnosis_control.php page permits a remote authenticated user to download PCAP files by manipulating the UserName GET parameter, exploiting the tcpdump function and enabling access to captured data. The issue is pa...

CVE-2016-4968

The linkreport/tmp/adminglobal page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request...

CVE-2016-4967

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to obtain sensitive information from 1 a backup of the device configuration via script/cfgshow.php or 2 PCAP files via script/system/tcpdump.php...

CVE-2016-4969

CVE-2016-4969 is a Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWAN (formerly AscernLink) before version 4.2.5. The flaw allows remote attackers to inject arbitrary web script or HTML via the IP parameter to /script/statistics/getconn.php. Fortinet’s advisory and release notes for Fo...

CVE-2016-4968

CVE-2016-4968 affects Fortinet FortiWAN (FortiWan) before 4.2.5. An authenticated but non-admin user can issue a GET request to the path /linkreport/tmp/admin_global and obtain an administrator cookie, enabling elevation of access. The vulnerability is an information disclosure flaw in the linkre...

CVE-2016-4967

Fortinet FortiWAN (AscernLink) before 4.2.5 is affected by CVE-2016-4967: an authenticated non-admin user can disclose sensitive data by accessing /script/cfg_show.php to grab a device configuration backup or /script/system/tcpdump.php to obtain a PCAP. The issue is confirmed across multiple sour...

CVE-2016-4966

The diagnosiscontrol.php page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter...

Fortinet FortiWAN Authentication Bypass Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. A security vulnerability exists in the tcpdump function in the diagnosiscontrol.php page in Fortinet FortiWAN. An attacker can exploit this vulnerability by changing the HTTP Get parameter 'UserName' to 'Administrator' ...

Fortinet FortiWAN Cross-Site Scripting Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. A cross-site scripting vulnerability exists in the IP parameter of the /script/statistics/getconn.php page in Fortinet FortiWAN. An attacker could exploit this vulnerability to execute arbitrary web script or HTML...

Fortinet FortiWAN Command Injection Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. A command injection vulnerability exists in the diagnosiscontrol.php page in the Fortinet FortiWAN network load balancing appliance. The vulnerability can be exploited to inject arbitrary operating system commands with...

Fortinet FortiWAN Information Disclosure Vulnerability (CNVD-2016-07347)

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by accessing the URL /script/cfgshow.php page to obtain a backup file of the device configuration, or by...

FortiWAN Multiple Vulnerabilities

FortWan 4.2.4 and below is exposed to cross site scripting, information leak and escalation of privilege vulnerabilities. CVE-2016-4965: Non-administrative authenticated user having access privileges to the nslookup functionality can perform OS command injection in the root user context...

Fortinet FortiWAN Information Disclosure Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by executing a GET request on the /linkreport/tmp/adminglobal page to obtain an administrator login cookie...

Fortinet FortiWAN load balancer appliance contains multiple vulnerabilities

Overview The Fortinet FortiWAN Ascernlink network load balancer appliance contains multiple vulnerabilities. Description According to the reporter, the Fortinet FortiWAN network load balancer appliance contains the following vulnerabilities.CWE-78: Improper Neutralization of Special Elements used...