CVE-2016-8494 Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.
HighCVSS 7.2
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet connect | = 14.2 | No fix listed |
| fortinet connect | = 14.10 | No fix listed |
| fortinet connect | = 15.10 | No fix listed |
| fortinet connect | = 16.7 | No fix listed |
| Fortinet Connect | = 14.2 | No fix listed |
| Fortinet Connect | = 14.10 | No fix listed |
| Fortinet Connect | = 15.10 | No fix listed |
| Fortinet Connect | = 16.7 | No fix listed |
References
- 96159 vdb-entry
- fortiguard.com vendor-advisory