| Package | Affected versions | Patched versions |
|---|---|---|
| fortisandbox | ≥ 3.2.0, < 3.2.2< 3.1.5 | 3.2.23.1.5 |
An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free