CVE-2016-5092

MEDIUM

Fortinet Fortiweb < 5.5.2 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature.

Scores

CVSS v3 4.9
EPSS 0.0031
EPSS Percentile 54.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-22
Status draft

Affected Products (1)

fortinet/fortiweb < 5.5.2

Timeline

Published Jul 13, 2016
Tracked Since Feb 18, 2026