Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um seine Privilegien zu erweitern, Code auszuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
Product
FortiSandbox ist eine Advanced Threat Detection Appliance.
Vulnerabilities 6
-
High 8.6
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet F…
-
High 7.8
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 an…
-
High 7.1
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged admi…
-
Medium 6.5CVE-2024-54018 EPSS 10%
Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox bef…
-
Medium 4.2
A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0…
-
Medium 4.1
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 …
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-24-261 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-261
-
FortiGuard PSIRT Advisory FG-IR-24-305 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-305
-
FortiGuard PSIRT Advisory FG-IR-24-306 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-306
-
FortiGuard PSIRT Advisory FG-IR-24-110 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-110
-
FortiGuard PSIRT Advisory FG-IR-24-353 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-353
-
FortiGuard PSIRT Advisory FG-IR-24-327 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-327