FG-IR-21-005: Command Injection in FSA sniffer module
Published Jul 7, 2021
·Updated
An instance of improper neutralization of special elements in FortiSandbox's sniffer module may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file.
Affected Software
1 affected component
Fortinet FortiSandbox
Event History
Jul 7, 2021
Advisory Published
via FortiGuard·12:00 AM
Data Sourced
via FortiGuard·12:00 AM
DescriptionSeverityWeaknessAffected Software
Oct 25, 2024
Advisory Published
via FortiGuard·12:00 AM
Frequently Asked Questions
1
What is the severity of FG-IR-21-005?
The severity of FG-IR-21-005 is critical due to potential command execution risks.
2
How do I fix FG-IR-21-005?
To fix FG-IR-21-005, ensure that you update FortiSandbox to the latest version that addresses this vulnerability.
3
Who is affected by FG-IR-21-005?
The vulnerability FG-IR-21-005 affects authenticated administrators of Fortinet FortiSandbox.
4
What type of attacks can FG-IR-21-005 facilitate?
FG-IR-21-005 can facilitate unauthorized command execution on the underlying system.
5
Is authentication required to exploit FG-IR-21-005?
Yes, an authenticated user is required to exploit the FG-IR-21-005 vulnerability.