Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-3614: FortiManager could let attackers download any file

CVE-2015-3614 · published 9 years ago

Summary

Versions of FortiManager 5.0.x before 5.0.11 and 5.2.x before 5.2.2 may allow a remote attacker to retrieve files from the system. This could expose sensitive configuration data or other information stored on the device. Update to the latest FortiManager firmware to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
fortinet	fortimanager_firmware	5.0.0 5.0.1 5.0.2 5.0.3 5.0.4 5.0.5 5.0.6 5.0.7 5.0.8 5.0.9 5.0.10 5.2.0 1 more version range `cpe:2.3:o:fortinet:fortimanager_firmware:5.0.0:::::::*`

Original advisory text

Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.

References

http://www.securityfocus.com/bid/74444
http://www.securitytracker.com/id/1032188 Third Party Advisory VDB Entry
https://fortiguard.com/psirt/FG-IR-15-011 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

2% chance of attack within 30 days

Type

CWE-200Information Exposure

Timeline

Published11 Aug 2017

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2015-3614 · NVD

Track software like this

Free during beta