CVE-2016-4066

High

Published: 13/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-4066 is a CSRF vulnerability in Fortinet FortiWeb before version 5.5.3 that allows remote attackers to hijack the authentication of administrators for password change requests via unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to unauthorizedly change administrator passwords, potentially leading to loss of control over the system.

Recommendation

It is recommended to update FortiWeb to version 5.5.3 or later to mitigate this vulnerability.

Other vulnerabilities in Fortinet FortiWeb

CVE-2025-64446CriticalActively exploited
A relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0-8.0.1, 7.6.0-7.6.4, 7.4.0-7.4.9, 7.2.0-7.2.11, and 7.0.0-7.0.11 may allow an attacker to execute administrative commands via crafted HTTP or HTTPS requests.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors.