Insufficient Session Expiration Vulnerability in FortiSandbox and FortiIsolator by Fortinet

CVE-2024-27779

What is CVE-2024-27779?

An insufficient session expiration vulnerability exists in FortiSandbox and FortiIsolator that could allow a remote attacker to exploit an admin session cookie. This issue permits unauthorized access to the admin's session, even after the admin user has been deleted. The vulnerability affects various versions of both FortiSandbox and FortiIsolator, potentially compromising security measures and enabling unauthorized activities.

References