Description
Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.
References (5)
Core 5
Core References
Exploit x_refsource_misc
http://packetstormsecurity.com/files/130156/Fortinet-FortiAuthenticator-XSS-Disclosure-Bypass.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100560
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72378
Vendor Advisory x_refsource_confirm
http://www.fortiguard.com/advisory/FG-IR-15-003/
Scores
EPSS
0.0008
EPSS Percentile
22.9%
Details
CWE
CWE-200
Status
published
Products (1)
fortinet/fortiauthenticator
3.0.0
Published
Feb 03, 2015
Tracked Since
Feb 18, 2026