CVE-2020-29011 | THREATINT

Description

Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests.

Reserved 2020-11-24 | Published 2021-08-04 | Updated 2024-10-25 | Assigner fortinet

HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X

Problem types

Execute unauthorized code or commands

Product status

FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0

affected

References

fortiguard.com/advisory/FG-IR-20-171

cve.org (CVE-2020-29011)

nvd.nist.gov (CVE-2020-29011)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.