CVE-2024-31490

MEDIUM

Fortinet FortiSandbox 3.2.2-4.4.4 - Exposure of Sensitive Information via HTTP GET Requests

Title source: llm

Description

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2.2 through 3.2.4, FortiSandbox 3.1.5 allows attacker to information disclosure via HTTP get requests.

References (1)

Core 1

Core References

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-24-051

Scores

CVSS v3 4.3

EPSS 0.0068

EPSS Percentile 71.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (2)

fortinet/fortisandbox 3.1.5

fortinet/fortisandbox 3.2.2 - 4.2.7

Published Sep 10, 2024

Tracked Since Feb 18, 2026