| Package | Affected versions | Patched versions |
|---|---|---|
| fortisandbox | ≥ 3.2.0, < 3.2.3≤ 3.1.4 | 3.2.3 |
An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free