CVE-2020-29013

An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.
References
Link Resource
https://fortiguard.com/advisory/FG-IR-20-178 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*

History

13 Apr 2022, 17:57

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 5.5
v3 : 5.4
CPE cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
CWE CWE-20
References (CONFIRM) https://fortiguard.com/advisory/FG-IR-20-178 - (CONFIRM) https://fortiguard.com/advisory/FG-IR-20-178 - Patch, Vendor Advisory

06 Apr 2022, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-04-06 09:15

Updated : 2024-02-04 22:29


NVD link : CVE-2020-29013

Mitre link : CVE-2020-29013

CVE.ORG link : CVE-2020-29013


JSON object : View

Products Affected

fortinet

  • fortisandbox
CWE
CWE-20

Improper Input Validation