Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-8494

Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.

Description

Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet Fortinet Connect

  • 14.2affected
  • 14.10affected
  • 15.10affected
  • 16.7affected

References