What is CVE-2021-43070?

CVE-2021-43070 is a medium-severity vulnerability in Fortinet Fortiwlm, classified under Path Traversal. CVSS score: 5.4/10. Published 2022-03-02.

How severe is CVE-2021-43070?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Path Traversal in Fortinet Fortiwlm

CVE-2021-43070

Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Fortinet Fortiwlm — versions FortiWLM 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2
Fortinet Fortiwlm — versions 8.2.2

Weakness classification (CWE)

CWE-22 — Path Traversal

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-43070?: CVE-2021-43070 is a medium-severity vulnerability in Fortinet Fortiwlm, classified under Path Traversal. CVSS score: 5.4/10. Published 2022-03-02.
How severe is CVE-2021-43070?: Medium severity. CVSS v3 base score is 5.4 out of 10.