medium4.3
CVE-2020-15939
An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attack…
Impact
An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisandbox | before 3.1.5 from 3.2.0 before 3.2.2 |