Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-15939 EUVD-2020-7910GHSA-v8wg-346x-j7mw

An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated,…

Published Sep 6, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSandbox Category: Network devices

Description

An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSandbox FortiSandbox 3.2.1, 3.1.4 —

References