Lucene search
PRIOn knowledge basePRION:CVE-2021-26097HistoryAug 04, 2021 - 4:15 p.m.
Command injection
2021-08-0416:15:00
PRIOn knowledge base
www.prio-n.com
1
An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortisandbox | ge | 3.2.0 | |
| fortisandbox | lt | 3.2.3 | |
| fortisandbox | ge | 3.1.0 | |
| fortisandbox | lt | 3.1.5 | |
| fortisandbox | lt | 3.0.7 |
References
Related
nvd
nvd
CVE-2021-26097
2021-08-04 16:15:08
cvelist
cvelist
CVE-2021-26097
2021-08-04 15:54:53
cve
cve
CVE-2021-26097
2021-08-04 16:15:08
cnvd
cnvd
Fortinet FortiSandbox OS Command Injection Vulnerability
2021-08-05 00:00:00
fortinet
fortinet
FortiSandbox - Command injection in web interface
2021-08-03 00:00:00