FortiVoice - Path traversal vulnerability in administrative interface

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoice may allow an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests

arbitrary files attacker cwe directory files http https interface may path path traversal path traversal vulnerability requests restricted system vulnerability