The vulnerabilities of the cgiauth() and cgiprocess() functions in FortiWeb’s web application firewall allow attackers to enhance their privileges.

The vulnerability of the cgiauth and cgiprocess functions in FortiWeb web applications relates to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability can allow an attacker to enhance their privileges by sending specially crafted HTTP or HTTPS...