Unrated severityNVD Advisory· Published Sep 6, 2021· Updated Oct 25, 2024

CVE-2020-15939

Description

An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL.

Affected products

Fortinet/Fortisandboxcpe-rescue
Range: FortiSandbox 3.2.1, 3.1.4

Patches

Vulnerability mechanics

References

fortiguard.com/advisory/FG-IR-20-071mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000