Race Condition Vulnerability in FortiSandbox Command Shell
CVE-2020-29014

6.3MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortinet Fortisandbox
Vendor
CVE Published:
9 July 2021

What is CVE-2020-29014?

A race condition vulnerability in the command shell of FortiSandbox prior to version 3.2.2 can be exploited by authenticated users. By executing a sequence of carefully crafted commands, an attacker may manipulate the execution flow, leading to a state where the system becomes unresponsive. This flaw underscores the importance of proper synchronization when handling concurrent executions.

Affected Version(s)

Fortinet FortiSandbox FortiSandbox before 3.2.2

References

https://fortiguard.com/advisory/FG-IR-20-185
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.