CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Fortinet, Linux. It may be remotely exploitable. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-27485
Severity
MEDIUM
CVSS
6.5
EPSS
0.63%
Fortinet Linux
Original NVD Description
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortinet FortiSandbox version 4.2.0, 4.0.0 through 4.0.2, 3.2.0 through 3.2.3, 3.1.x and 3.0.x allows a remote and authenticated attacker with read permission to retrieve arbitrary files from the underlying Linux system via a crafted HTTP request.
Related CVEs
Other vulnerabilities affecting the same vendor(s)