CVE-2024-45328
published 2025-03-11CVE-2024-45328: An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI…
PriorityP342high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.14%
3.5th percentile
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortisandbox | — | — |
| fortinet | fortisandbox | >= 4.4.0 < 4.4.7 | 4.4.7 |
| fortinet | fortisandbox | 4.4.0 – 4.4.6 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xg2h-39gr-h327: An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4
ghsa_unreviewed·2025-03-11
CVE-2024-45328 [HIGH] CWE-863 GHSA-xg2h-39gr-h327: An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.
Fortinet
Incorrect authorization in GUI console
vendor_fortinet·2025-03-11·CVSS 7.8
CVE-2024-45328 [HIGH] CWE-863 Incorrect authorization in GUI console
FG-IR-24-261: Incorrect authorization in GUI console
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.
CVEs: CVE-2024-45328
CWEs: CWE-863
CVSS: 7.8 (high)
Affected products: FortiSandbox
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-11
Published