| Package | Affected versions | Patched versions |
|---|---|---|
| fortiwan | ≥ 4.4.0, < 4.5.8 | 4.5.8 |
A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free