Aller au contenu
en Se connecter
4.3 Moyenne

CVE-2020-15939 An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may…

Description

An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiSandbox Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiSandbox

Les 12 CVE de Fortinet FortiSandbox →
CVE-2020-29013 An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an… 5.4 Moyenne CVE-2021-32591 A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in… 5.3 Moyenne CVE-2020-29012 An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse… 5.6 Moyenne CVE-2021-24014 Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before… 5.4 Moyenne
Suivre cette CVE