What is CVE-2024-27779?

CVE-2024-27779 is a medium-severity vulnerability in Fortinet Fortiisolator, classified under Insufficient Session Expiration. CVSS score: 6.7/10. Published 2025-07-18.

How severe is CVE-2024-27779?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Fortinet Fortiisolator

CVE-2024-27779

An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all versions may allow a remote attacker in possession of an admin session cookie to keep using that admin's session even after the admin user was deleted.

EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L.

Affected products

Fortinet Fortiisolator — versions 2.4.0, 2.3.0, 2.2.0
Fortinet Fortisandbox — versions 4.4.0, 4.2.1, 4.0.0

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-27779?: CVE-2024-27779 is a medium-severity vulnerability in Fortinet Fortiisolator, classified under Insufficient Session Expiration. CVSS score: 6.7/10. Published 2025-07-18.
How severe is CVE-2024-27779?: Medium severity. CVSS v3 base score is 6.7 out of 10.