FortiOS, FortiProxy & FortiSwitchManager - Arbitrary read/write vulnerability in administrative interface

A relative path traversal vulnerability [CWE-23] in FortiOS, FortiProxy, and FortiSwitchManager may allow an authenticated attacker to read and write files on the underlying Linux system via crafted HTTP or HTTPS requests.

cwe files fortios fortiproxy fortiswitchmanager http https interface linux may path path traversal relative requests system vulnerability