High WID-SEC-2023-0931 2 CVEs

Fortinet FortiSandbox: Mehrere Schwachstellen

Published Apr 11, 2023 · Updated Apr 11, 2023 · de-DE

Vendor: Fortinet Product: FortiSandbox Product: FortiSandbox < 3.2.4 Product: FortiSandbox < 4.0.3 Product: FortiSandbox < 4.2.3 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um Daten zu manipulieren oder beliebigen Programmcode auszuführen.

Product

FortiSandbox ist eine Advanced Threat Detection Appliance.

Vulnerabilities 2

High 8.3

CVE-2022-27487

A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.…

Fortinet FortiSandbox FortiDeceptor Network devices

Apr 11, 2023
Medium 6.2

CVE-2022-27485

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortin…

Fortinet FortiSandbox Network devices

Apr 11, 2023

Revision history

2023-04-11 #1
Initiale Fassung

References

Fortiguard Security Advisory vom 2023-04-11
https://fortiguard.fortinet.com/psirt/FG-IR-22-060
Fortiguard Security Advisory vom 2023-04-11
https://fortiguard.fortinet.com/psirt/FG-IR-22-056