725 matches found
CVE-2022-30305
An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...
Design/Logic Flaw
An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...
CVE-2022-30305
An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...
CVE-2022-30305
CVE-2022-30305 describes an insufficient logging flaw (CWE-778) in FortiSandbox and FortiDeceptor products that could allow a remote attacker to repeatedly enter incorrect credentials without generating log entries and with no limit on failed attempts. Affected: FortiSandbox versions 3.1.0–4.0.2 ...
CVE-2022-30305
An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...
PT-2022-20057 · Fortinet · Fortisandbox +1
Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 3.1.0 through 4.0.2 FortiSandbox versions 3.2.0 through 3.2.3 FortiDeceptor versions 3.0.0 through 4.2.0 Description: An insufficient logging issue may allow a remote attacker to repeatedly enter incorrect credentials...
Fortinet FortiSandbox 安全漏洞
Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. A security vulnerability exists in Fortinet FortiSandbox versions 4.0.0 throug...
FortiSandbox & FortiDeceptor - Insufficient logging and lack of limitation of failed authentication attempts
An insufficient logging CWE-778 vulnerability in FortiSandbox and FortiDeceptor may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts...
The vulnerability of the MTA email message checking module and the file checksum search module of the FortiSandbox threat detection and removal system allows a perpetrator to execute arbitrary SQL code.
The vulnerability of the MTA email message checking module and the file checksum search module of the FortiSandbox threat detection and removal system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerability of the FortiSandbox’s web interface allows a perpetrator to execute arbitrary commands.
The vulnerability of the FortiSandbox threat detection and mitigation web interface is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary commands b...
PT-2022-15346 · Fortinet · Fortisandbox +3
Name of the Vulnerable Software and Affected Versions: FortiManager versions 7.0.1 and below, 6.4.6 and below FortiAnalyzer versions 7.0.2 and below, 6.4.7 and below FortiOS versions 6.2.x and 6.0.x FortiSandbox versions 4.0.x, 3.2.x and 3.1.x Description: An improper certificate validation issue...
Lack of certificate verification when establishing secure connections
...
多款Fortinet产品信任管理问题漏洞
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A trust management issue...
The vulnerability of the file scan component in the FortiSandbox system, which is used for threat detection and remediation, allows a perpetrator to execute arbitrary code.
The vulnerability of the file scan component in the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the backurl parameter...
CVE-2020-29013
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...
CVE-2020-29013
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...
Input validation
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...
CVE-2020-29013
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...
CVE-2020-29013
Fortinet FortiSandbox (before 3.2.2) contains an improper input validation vulnerability in the sniffer interface. An authenticated attacker can silence the sniffer by sending crafted requests, potentially impacting availability (CVSS 3.1/5.4). If applicable, update to FortiSandbox 3.2.2 or later...
CVE-2020-29013
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...