CVE-2021-22125 MEDIUM

CVE-2021-22125

Vendor Fortinet
Product Fortinet FortiSandbox
Published July 20, 2021
Last update October 25, 2024

CVSS base score

6.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

What the vulnerability does

01Description

An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file.

Key dates

02Disclosure timeline

July 20, 2021 CVE published
October 25, 2024 Record updated