Fortinet FortiSandbox
cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*
- >= 5.0.0, <= 5.0.5
- >= 4.4.0, <= 4.4.8
A path traversal vulnerability has been identified in Fortinet FortiSandbox versions 5.0.0 through 5.0.5 and 4.4.0 through 4.4.8. This vulnerability may allow an unauthenticated attacker to bypass authentication and escalate privileges via specially crafted HTTP requests to the JRPC API.
Exploitation of this vulnerability could lead to unauthorized authentication bypass and privilege escalation.
Users can upgrade to Fortinet FortiSandbox version 5.0.6 or 4.4.9 or above, depending on their current version.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.