Skip to content
fr Sign in
4.2 Medium

CVE-2024-52960 A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0,…

Description

A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and before 4.2.7 allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests.

Affected products and versions

Product Affected versions Fixed in
FortiSandbox 5.0.0 No fix stated
FortiSandbox 4.4 4.4.0 → 4.4.6 No fix stated
FortiSandbox 4.2 4.2.1 → 4.2.7 No fix stated
FortiSandbox 4.0 4.0.0 → 4.0.6 No fix stated
FortiSandbox 3.2 3.2.0 → 3.2.4 No fix stated
FortiSandbox 3.1 3.1.0 → 3.1.5 No fix stated
FortiSandbox 3.0 3.0.0 → 3.0.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiSandbox

The 52 CVEs of FortiSandbox →
CVE-2026-107656 An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through… 9.6 Critical CVE-2026-106172 A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0… 4.9 Medium CVE-2026-106170 An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox… 4.8 Medium CVE-2026-26084 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through… 8.9 High
Track this CVE