What is CVE-2020-29011?

CVE-2020-29011 is a high-severity vulnerability in Fortinet Fortisandbox, classified under SQL Injection. CVSS score: 8.8/10. Published 2021-08-04.

How severe is CVE-2020-29011?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Fortinet Fortisandbox

CVE-2020-29011

Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests.

Vulnerability class: SQL Injection

EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortisandbox — versions FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0
Fortinet Fortisandbox

Weakness classification (CWE)

CWE-89 — SQL Injection

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-29011?: CVE-2020-29011 is a high-severity vulnerability in Fortinet Fortisandbox, classified under SQL Injection. CVSS score: 8.8/10. Published 2021-08-04.
How severe is CVE-2020-29011?: High severity. CVSS v3 base score is 8.8 out of 10.