Description
A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value.
INFO
Published Date :
2024-12-19T13:56:38.177Z
Last Modified :
2024-12-19T15:17:08.639Z
Source :
fortinet
AFFECTED PRODUCTS
The following products are affected by CVE-2021-26102 vulnerability.
| Vendors | Products |
|---|---|
| Fortinet |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2021-26102.
| URL | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-21-048 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact