{"id":"CVE-2023-42783","state":"PUBLISHED","title":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read","description":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.","publishedAt":"2023-11-14T18:04:50.699Z","updatedAt":"2024-08-30T18:27:39.061Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiWLM"],"affected":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","status":"affected","lessThanOrEqual":"8.6.6","versionType":"semver"},{"version":"8.5.0","status":"affected","lessThanOrEqual":"8.5.4","versionType":"semver"},{"version":"8.4.0","status":"affected","lessThanOrEqual":"8.4.2","versionType":"semver"},{"version":"8.3.0","status":"affected","lessThanOrEqual":"8.3.2","versionType":"semver"},{"version":"8.2.2","status":"affected"}]}],"references":["https://fortiguard.com/psirt/FG-IR-23-143"],"weaknesses":["CWE-23"],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/42xxx/CVE-2023-42783.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-42783","state":"PUBLISHED","datePublished":"2023-11-14T18:04:50.699Z","dateUpdated":"2024-08-30T18:27:39.061Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2023-09-14T08:37:38.656Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests."}],"affected":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","status":"affected","lessThanOrEqual":"8.6.6","versionType":"semver"},{"version":"8.5.0","status":"affected","lessThanOrEqual":"8.5.4","versionType":"semver"},{"version":"8.4.0","status":"affected","lessThanOrEqual":"8.4.2","versionType":"semver"},{"version":"8.3.0","status":"affected","lessThanOrEqual":"8.3.2","versionType":"semver"},{"version":"8.2.2","status":"affected"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-143","name":"https://fortiguard.com/psirt/FG-IR-23-143"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-23","lang":"en","description":"Information disclosure","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2023-11-14T18:04:50.699Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiWLM version 8.6.6 or above \nPlease upgrade to FortiWLM version 8.5.5 or above \n"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-143","name":"https://fortiguard.com/psirt/FG-IR-23-143","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T19:30:24.337Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","versions":[{"version":"8.2.2","status":"affected"},{"version":"8.3.0","status":"affected","lessThanOrEqual":"8.3.2","versionType":"semver"},{"version":"8.4.0","status":"affected","lessThanOrEqual":"8.4.2","versionType":"semver"},{"version":"8.5.0","status":"affected","lessThanOrEqual":"8.5.4","versionType":"semver"},{"version":"8.6.0","status":"affected","lessThanOrEqual":"8.6.6","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-30T18:22:55.290862Z","id":"CVE-2023-42783","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-30T18:27:39.061Z"}}]}}}