CyberCVE

CVE-2024-45328

An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.

Severity
High 7.1
CVSS 3.1
Adjacent, local or physical access what this means
Exploited
Not listed
EPSS
0.001
3.0th percentile
Discovered by
Third party
Vendor advisory field
Published
Mar 11, 2025
Assigned by fortinet

Description

An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.

Weakness: CWE-863

Affected products

Vendor Product Category Matched by
Fortinet FortiSandbox Threat Detection & Sandbox cna-assigner
Vendor-reported products (1)
  • Fortinet · FortiSandbox

Credit

Fortinet is pleased to thank Mister Thomas SAUTIER for reporting this vulnerability under responsible disclosure.

Vendor remediation

Please upgrade to FortiSandbox version 5.0.0 or above Please upgrade to FortiSandbox version 4.4.7 or above

References

Something wrong here?