Fortinet FortiSandbox Cloud OS Command Injection Vulnerability

A vulnerability allowing OS command injection has been identified in Fortinet FortiSandbox Cloud version 5.0.4. This issue arises from improper neutralization of special elements used in OS commands, potentially allowing a privileged attacker with a super-admin profile and CLI access to execute unauthorized code or commands. The vulnerability can be exploited through crafted HTTP requests.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code or commands on the affected system.

Remediation

Fortinet has addressed this vulnerability in FortiSandbox Cloud version 5.0.5. Customers using version 5.0.4 should update to version 5.0.5.