CVE-2015-3614
HighSummary
Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2 allow remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to security breaches and loss of confidentiality.
Recommendation
It is recommended to update FortiManager to the latest version to mitigate this vulnerability and conduct a security audit of the system.
Other vulnerabilities in Fortinet FortiManager
See all- CVE-2015-3617High
Fortinet FortiManager versions 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
- CVE-2016-8495High
CVE-2016-8495 describes an improper certificate validation vulnerability in Fortinet FortiManager versions 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1. This allows a remote attacker to spoof a trusted entity using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
- CVE-2024-48884High
A path traversal vulnerability in Fortinet FortiManager, FortiOS, and FortiProxy allows a remote authenticated attacker with access to the Security Fabric interface to write arbitrary files, or an unauthenticated attacker to delete an arbitrary folder.
- CVE-2015-3616Critical
CVE-2015-3616 is an SQL injection vulnerability in Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2, allowing remote attackers to execute arbitrary commands via unspecified parameters.
Original NVD description (English source)
Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.