Local File Read Vulnerability in Fortinet FortiAuthenticator

CVE-2015-1457

Summary

Fortinet FortiAuthenticator version 3.0.0 contains a vulnerability that allows local users to read arbitrary files by utilizing the -f flag in the dig command. This flaw presents significant security concerns, as it may lead to unauthorized access to sensitive information and potentially compromise system integrity. Organizations relying on this product should assess their exposure and implement necessary security measures to mitigate risks associated with this vulnerability.

References