CVE-2024-45328: Incorrect authorization in GUI console

Q: What is the severity of CVE-2024-45328?

CVE-2024-45328 is categorized as a medium severity vulnerability impacting FortiSandbox versions 4.4.0 through 4.4.6.

Q: How do I fix CVE-2024-45328?

To fix CVE-2024-45328, upgrade FortiSandbox to version 4.4.7 or later.

Q: Who is impacted by CVE-2024-45328?

CVE-2024-45328 affects low privileged administrators using FortiSandbox versions 4.4.0 to 4.4.6.

Q: What can attackers do with CVE-2024-45328?

Attackers can exploit CVE-2024-45328 to execute elevated CLI commands through the GUI console menu.

Q: What type of vulnerability is CVE-2024-45328 classified as?

CVE-2024-45328 is classified as an incorrect authorization vulnerability, specifically identified as CWE-863.

Published Mar 11, 2025

Updated

An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.

Other sources

An incorrect authorization vulnerability [CWE-863] in FortiSandbox may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.

— FortiGuard

Affected Software

3 affected componentsFixes available

Fortinet FortiSandbox>=4.4.0<=4.4.6

Fortinet FortiSandbox>=4.4.0<4.4.7

Remediation

Information

Please upgrade to FortiSandbox version 5.0.0 or above Please upgrade to FortiSandbox version 4.4.7 or above

Event History

Mar 11, 2025

Advisory Published

via FortiGuard·12:00 AM

CVE Published

via MITRE·02:54 PM

Data Sourced

via MITRE·02:54 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-45328?