CVE-2021-24010
CVE-2021-24010
Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:F/RL:X/RC:X
Produtos afetados
Fortinet · Fortinet FortiSandboxQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://fortiguard.com/advisory/FG-IR-20-202