Description
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2.2 through 3.2.4, FortiSandbox 3.1.5 allows attacker to information disclosure via HTTP get requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSandbox | 4.4.0 – ≤ 4.4.4, 4.2.1 – ≤ 4.2.6, 4.0.0 – ≤ 4.0.6, 3.2.2 – ≤ 3.2.4, 3.1.5 | — |
Advisories 1
- WID-SEC-2024-2101 Fortinet FortiSandbox: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 10, 2024