← Back

CVE-2026-27316

nvd nist
Published: Apr 14, 2026Modified: Jun 17, 2026

JSON object

Loading...
2.7
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.2 / Impact: 1.4
Source: psirt@fortinet.com (Secondary)

Description

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection.

Affected (3)

Fortinet
2 products
Fortisandbox
Fortisandbox Cloud
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Fortisandbox
From 4.4.0 to 5.0.6
Fortinet
Fortisandbox Cloud
Version 5.0.4
Fortisandbox Cloud
Version 5.0.5

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.