[FortiWLM] Unauthenticated limited file read vulnerability

Summary

A relative path traversal [CWE-23] in FortiWLM may allow a remote unauthenticated attacker to read sensitive files.

Acknowledgement

Fortinet is pleased to thank security researcher Zach Hanley (@hacks_zach) of Horizon3.ai for discovering and reporting this vulnerability under responsible disclosure.

Timeline

2024-12-18: Initial publication