Skip to main content

Fortiwlm CVE-2023-42783

HIGH
Relative Path Traversal (CWE-23)
2023-11-14 psirt@fortinet.com
Fortinet Path Traversal Fortiwlm
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 14, 2023 - 18:15 nvd
HIGH 7.5

DescriptionNVD

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.

AnalysisAI

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-23. A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests. Affected products include: Fortinet Fortiwlm. Version information: version 8.6.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Fortiwlm

View all
CVE-2023-34993 CRITICAL POC
9.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2017-7336 CRITICAL
9.8 Jul 22

A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in an
CVE-2023-34991 CRITICAL
9.8 Nov 14

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.
CVE-2023-36550 CRITICAL
9.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-36549 CRITICAL
9.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-36548 CRITICAL
9.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-36547 CRITICAL
9.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-48782 HIGH
8.8 Dec 13

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-34989 HIGH
8.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-34988 HIGH
8.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-34987 HIGH
8.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio
CVE-2023-34986 HIGH
8.8 Oct 10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

Same weakness CWE-23 – Relative Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2024-27199 HIGH POC
7.3
CVE-2025-34510 HIGH POC
8.8
CVE-2026-34926 MEDIUM POC
6.7
CVE-2024-24578 CRITICAL POC
9.8
CVE-2025-52207 CRITICAL POC
9.9
CVE-2023-6825 CRITICAL POC
9.9
CVE-2022-1373 HIGH POC
7.2

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8
CVE-2024-48248 HIGH POC
8.6

Share

CVE-2023-42783 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy