Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qcqx-4h2x-x43j

Опубликовано: 17 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access to read sensitive data via CLI.

A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access to read sensitive data via CLI.

EPSS

Процентиль: 7%
0.00028
Низкий

8.2 High

CVSS3

Дефекты

CWE-321

Связанные уязвимости

CVSS3: 8.2
nvd
11 месяцев назад

A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access to read sensitive data via CLI.

CVSS3: 4.4
fstec
11 месяцев назад

Уязвимость интерфейса командной строки системы выявления и устранения угроз FortiSandbox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 7%
0.00028
Низкий

8.2 High

CVSS3

Дефекты

CWE-321