PT-2016-6198

Name of the Vulnerable Software and Affected Versions Fortinet FortiWan versions prior to 4.2.5 Description The issue concerns the diagnosis control.php page, where remote authenticated users can download PCAP files. This is related to the UserName GET parameter. Recommendations For versions prio...

PT-2016-6197

Name of the Vulnerable Software and Affected Versions Fortinet FortiWan formerly AscernLink versions prior to 4.2.5 Description The issue allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges. This is achieved via the graph...