CVE-2023-34990 | THREATINT

Description

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.

Reserved 2023-06-09 | Published 2024-12-18 | Updated 2024-12-20 | Assigner fortinet

CRITICAL: 9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X

Problem types

Execute unauthorized code or commands

Product status

Default status

unaffected

8.6.0

affected

8.5.0

affected

References

fortiguard.com/psirt/FG-IR-23-144

cve.org (CVE-2023-34990)

nvd.nist.gov (CVE-2023-34990)

Download JSON