| IR Number | FG-IR-20-202 |
| Date | Aug 3, 2021 |
| Severity |
High |
| CVSSv3 Score | 7.9 |
| Impact | Unauthorized access to files |
| CVE ID | CVE-2021-24010 |
| Affected Products |
FortiSandbox
:
3.2.2, 3.2.1, 3.2.0, 3.1.5, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiSandbox - Multiple path traversals
Summary
Improper limitation of a pathname to a restricted directory (CWE-22) vulnerabilities in FortiSandbox may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests.c
Affected Products
FortiSandbox 3.2.2 and below.
FortiSandbox 3.1.4 and below.
Solutions
Please upgrade to FortiSandbox version 4.0.0 or above
Please upgrade to FortiSandbox version 3.2.3 or above
Please upgrade to FortiSandbox version 3.1.5 or above