FORTINET Security Advisory
Published Date: Not specified
Advisory Summary
## 🔥 FortiSandbox GUI: High-Severity Auth Bypass (CWE-288)
Fortinet disclosed a CVSSv3 9.6 (Critical) issue affecting the FortiSandbox web management interface (GUI). The vulnerability, “Authentication Bypass Using an Alternate Path or Channel” (CWE-288), can enable a remote, unauthenticated attacker to bypass authentication by sending crafted HTTP requests.
- Unauthorized access to the FortiSandbox management functions
- Potential session and access control compromise via alternate request paths/channels
- Increased risk of downstream harm (e.g., configuration changes, data exposure, or abuse of sandbox capabilities)
- enterprise networks with weak segmentation,
- VPN/edge portals,
- or exposed paths via misconfigured reverse proxies/WAF rules.
- restrict GUI access to trusted management IPs/subnets only,
- enforce strong admin MFA (where applicable),
- validate firewall/WAF rules around the management endpoints.
- look for suspicious HTTP requests that may indicate alternate-path probing,
- check for unexpected admin logins or session anomalies after exposure windows.
- CVE Class/Pattern: Authentication Bypass Using an Alternate Path or Channel
- CWE: CWE-288
- Reported severity: CVSSv3 9.6
-288
Reference: Vendor Advisory