An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
Fortinet FortiSandbox and FortiSandbox PaaS are affected by an authentication bypass flaw that lets an attacker reach protected functions through an alternate path. A successful attack could allow unauthorized code or commands to be run on the system through specially crafted HTTP requests.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
Affected versions
- Fortinet FortiSandbox
From 5.0.0 · through 5.0.6; From 4.4.0 · through 4.4.9; From 4.2.1 · through 4.2.8
- Fortinet FortiSandbox PaaS
From 5.0.0 · through 5.0.6; From 4.4.0 · through 4.4.9; From 4.2.1 · through 4.2.8