Lucene search
FortiGuard LabsFG-IR-20-071HistoryAug 03, 2021 - 12:00 a.m.
FortiSandbox - Unauthorized user able to download the device configuration file.
2021-08-0300:00:00
FortiGuard Labs
www.fortiguard.com
15
fortisandbox
access control vulnerability
cwe-284
authenticated attacker
recovery url
configuration file
software
EPSS
0.001
Percentile
22.7%
An improper access control vulnerability (CWE-284) in FortiSandbox may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL.
Related
prion
prion
Improper access control
2021-09-06 16:15:00
nvd
nvd
CVE-2020-15939
2021-09-06 16:15:07
cvelist
cvelist
CVE-2020-15939
2021-09-06 15:19:38
cve
cve
CVE-2020-15939
2021-09-06 16:15:07