Summary
Ein lokaler oder entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um beliebigen Code auszuführen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.
Product
FortiSandbox ist eine Advanced Threat Detection Appliance.
Vulnerabilities 6
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.9
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
Medium 6.5
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
-
Medium 6.5
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbo…
-
Medium 5.8
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
Revision history
-
#2
Prüfung Produkteintragung
-
#1
Initiale Fassung
References
-
FortiGuard Security Advisory vom 2024-04-09
https://fortiguard.fortinet.com/psirt/FG-IR-23-411
-
FortiGuard Security Advisory vom 2024-04-09
https://fortiguard.fortinet.com/psirt/FG-IR-23-416
-
FortiGuard Security Advisory vom 2024-04-09
https://fortiguard.fortinet.com/psirt/FG-IR-23-454
-
FortiGuard Security Advisory vom 2024-04-09
https://fortiguard.fortinet.com/psirt/FG-IR-23-489
-
FortiGuard Security Advisory vom 2024-04-09
https://fortiguard.fortinet.com/psirt/FG-IR-24-060