CVE-2014-3115

CVE-2014-3115 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in the web administration console of Fortinet FortiWeb appliances prior to version 5.2.0. An attacker could exploit these flaws to hijack the authentication of an administrator, specifically through the system/config/adminadd function and other unspecified vectors. With a CVSS score of 6.8 (medium severity), successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P) due to the network-based attack vector and medium attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.