A hardcoded cryptographic key flaw in FortiSandbox and FortiSandbox Cloud API may allow unauthenticated attackers to access certain endpoints using specially crafted HTTP requests. Administrators should review the vendor advisory for available patches and mitigation steps.

fortisandboxauthentication-bypasscwe-321api-security
READ THE ORIGINAL ARTICLE AT FORTIGUARD.FORTINET.COM →