| Package | Affected versions | Patched versions |
|---|---|---|
| fortivoice | = 7.0.0≥ 6.0.0, ≤ 6.0.12≥ 6.4.0, < 6.4.8 | 6.4.8 |
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free