1. Home
  2. CVE Database
  3. CVE-2015-3614
HIGH · 7.5

CVE-2015-3614

Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.

Vulnerability Description

Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
FortinetFortimanager Firmware5.0.0
FortinetFortimanager 2000E-
FortinetFortimanager 200D-
FortinetFortimanager 3000F-
FortinetFortimanager 300E-
FortinetFortimanager 3900E-
FortinetFortimanager 400E-

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2015-3614?

CVE-2015-3614 is a vulnerability with a CVSS score of 7.5 (HIGH). Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.

How severe is CVE-2015-3614?

CVE-2015-3614 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-3614?

Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortimanager Firmware, Fortinet Fortimanager 2000E, Fortinet Fortimanager 200D, Fortinet Fortimanager 3000F, Fortinet Fortimanager 300E.