CVE-2024-27779

🗓️ 18 Jul 2025 07:58:23Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 10 Views

Insufficient session expiration in FortiSandbox and FortiIsolator allows session reuse by attackers.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2024-27779	18 Jul 202507:58	–	attackerkb
Circl	CVE-2024-27779	22 Jul 202503:54	–	circl
CNNVD	Fortinet FortiSandbox和Fortinet FortiIsolator 代码问题漏洞	18 Jul 202500:00	–	cnnvd
Cvelist	CVE-2024-27779	18 Jul 202507:58	–	cvelist
EUVD	EUVD-2024-24972	3 Oct 202520:07	–	euvd
NVD	CVE-2024-27779	18 Jul 202508:15	–	nvd
Positive Technologies	PT-2025-30014 · Fortinet · Fortiisolator +1	8 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-27779	20 Jul 202508:46	–	redhatcve
Vulnrichment	CVE-2024-27779	18 Jul 202507:58	–	vulnrichment

NVD

Node

fortinet fortiisolatorRange1.2.0–2.4.5

fortinet fortisandboxRange3.2.0–4.2.7

fortinet fortisandboxRange4.4.0–4.4.5

[
  {
    "vendor": "Fortinet",
    "product": "FortiSandbox",
    "cpes": [
      "cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "4.4.0",
        "lessThanOrEqual": "4.4.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.2.1",
        "lessThanOrEqual": "4.2.6",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.0.0",
        "lessThanOrEqual": "4.0.6",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.2.0",
        "lessThanOrEqual": "3.2.4",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiIsolator",
    "cpes": [
      "cpe:2.3:a:fortinet:fortiisolator:2.4.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.3.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.3.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.3.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.3.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.3.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.1.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:2.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:1.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:1.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiisolator:1.2.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "2.4.0",
        "lessThanOrEqual": "2.4.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "2.3.0",
        "lessThanOrEqual": "2.3.4",
        "status": "affected"
      },
      {
        "version": "2.2.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "2.1.0",
        "lessThanOrEqual": "2.1.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "2.0.0",
        "lessThanOrEqual": "2.0.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "1.2.0",
        "lessThanOrEqual": "1.2.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-035

14 Jan 2026 14:15Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.7

EPSS0.00454

SSVC

CWE-613