CVE-2016-4966

The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf	Release Notes Third Party Advisory
http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities	Third Party Advisory
http://www.securityfocus.com/bid/92781	Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/724487	Third Party Advisory US Government Resource
http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf	Release Notes Third Party Advisory
http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities	Third Party Advisory
http://www.securityfocus.com/bid/92781	Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/724487	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2016-09-21 14:25

Updated : 2025-04-12 10:46

NVD link : CVE-2016-4966

Mitre link : CVE-2016-4966

CVE.ORG link : CVE-2016-4966

JSON object : View

Products Affected

fortinet

fortiwan

CWE

CWE-287

Improper Authentication

{"id": "CVE-2016-4966", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2016-09-21T14:25:07.720", "references": [{"url": "http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/92781", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://www.kb.cert.org/vuls/id/724487", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf", "tags": ["Release Notes", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/92781", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.kb.cert.org/vuls/id/724487", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter."}, {"lang": "es", "value": "La p\u00e1gina diagnosis_control.php en Fortinet FortiWan (anteriormente AscernLink) en versiones anteriores a 4.2.5 permite a usuarios remotos autenticados descargar archivos PCAP a trav\u00e9s de vectores relacionados con el par\u00e1metro UserName GET."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3515FEA7-F6FC-4CD3-8B83-5EE97B6A9308", "versionEndIncluding": "4.2.4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}