CVE-2016-4966 (fortiwan)
The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.
Source: CVE-2016-4966 (fortiwan)