CVE-2020-29011 — Fortinet / Fortinet FortiSandbox

CVE-2020-29011

Fortinet / Fortinet FortiSandbox PUBLISHED

Description (CNA)

Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiSandbox	affected FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-20-171

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-20-171

CISA-ADP

No English description supplied.

No references supplied.