CVE-2024-45328
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.
Severity
High 7.1
CVSS 3.1
Exploited
Not listed
EPSS
0.001
3.9th percentile
Discovered by
Third party
Vendor advisory field
Published
Mar 11, 2025
Assigned by fortinet
Description
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.
Weakness: CWE-863
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiSandbox | Threat Detection & Sandbox | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiSandbox
Credit
Fortinet is pleased to thank Mister Thomas SAUTIER for reporting this vulnerability under responsible disclosure.
Vendor remediation
Please upgrade to FortiSandbox version 5.0.0 or above Please upgrade to FortiSandbox version 4.4.7 or above