CVE-2024-31487

Summary

CVE-2024-31487 is a path traversal vulnerability affecting various versions of Fortinet FortiSandbox. An attacker can exploit this issue by crafting malicious HTTP requests, which may result in information disclosure. FortiSandbox versions between 2.4.0 and 4.4.4, inclusive, are impacted, including 4.4.0 through 4.4.4, 4.2.0 through 4.2.6, 4.0.0 through 4.0.5, 3.2.0 through 3.2.4, 3.1.0 through 3.1.5, and 3.0.0 through 3.0.7. Additionally, versions 2.5.0 through 2.5.2 and 2.4.0 through 2.4.1 are also susceptible. This vulnerability allows unauthorized access to sensitive information, posing a significant risk to organizations using the affected FortiSandbox versions. Upgrading to a patched version is strongly recommended.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.