CVE-2024-52960: Client-side enforcement of server-side security related to vm download feature

Published Mar 11, 2025
·
Updated

A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and before 4.2.7 allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests.

Other sources

A client-side enforcement of server-side security vulnerability [CWE-602] in FortiSandbox may allow an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests.

FortiGuard

Affected Software

11 affected componentsFixes available
Fortinet FortiSandbox>=4.4.0<4.4.6, <4.2.7
Fortinet FortiSandbox=.
Fortinet FortiSandbox>=4.4.0<=4.4.6
Fortinet FortiSandbox>=4.2.0<=4.2.7
Fortinet FortiSandbox>=4.0
Fortinet FortiSandbox>=3.2
Fortinet FortiSandbox>=3.1
Fortinet FortiSandbox>=3.0
Fortinet FortiSandbox>=3.0.0<4.2.8
Fortinet FortiSandbox>=4.4.0<4.4.7
Fortinet FortiSandbox=5.0.0

Remediation

Information

Upgrade to FortiSandbox version 5.0.1 or above Upgrade to FortiSandbox version 4.4.7 or above Upgrade to FortiSandbox version 4.2.8 or above

Event History

Mar 11, 2025
Advisory Published
via FortiGuard·12:00 AM
CVE Published
via MITRE·02:54 PM
Data Sourced
via MITRE·02:54 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-52960?

CVE-2024-52960 is classified as a client-side enforcement of server-side security vulnerability with moderate severity.

2

How do I fix CVE-2024-52960?

To mitigate CVE-2024-52960, upgrade Fortinet FortiSandbox to version 5.0.1 or higher, or 4.4.7 or higher for versions 4.4.0 through 4.4.6, and 4.2.8 or higher for versions from 4.2.0 to 4.2.7.

3

What versions of Fortinet FortiSandbox are affected by CVE-2024-52960?

Fortinet FortiSandbox versions 4.4.0 through 4.4.6 and all versions prior to 4.2.7 are affected by CVE-2024-52960.

4

Can an unauthenticated user exploit CVE-2024-52960?

No, only an authenticated user with at least read-only permissions can exploit CVE-2024-52960.

5

What type of vulnerability is CVE-2024-52960?

CVE-2024-52960 is a client-side enforcement of server-side security vulnerability, indicating that it allows unauthorized commands to be executed via crafted requests.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203