CVE-2016-4966 (fortiwan)

The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.

Source: CVE-2016-4966 (fortiwan)