CVE-2021-41026 — Fortinet / Fortinet FortiWeb

CVE-2021-41026

Fortinet / Fortinet FortiWeb PUBLISHED

Description (CNA)

A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiWeb	affected FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-156

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-156

CISA-ADP

No English description supplied.

No references supplied.