CVE-2021-41026 | THREATINT

Description

A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

Reserved 2021-09-13 | Published 2022-04-06 | Updated 2024-10-22 | Assigner fortinet

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C

Problem types

Improper access control

Product status

FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15

affected

References

fortiguard.com/advisory/FG-IR-21-156

cve.org (CVE-2021-41026)

nvd.nist.gov (CVE-2021-41026)

Download JSON