CVE-2024-31487
Status: ModifiedMedium (6.5)—
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to information disclosure via crafted http requests.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Base score: 6.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.86%
- Percentile among all scored CVEs: 57
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-22
References
Raw JSON (NVD)
Show
{
"id": "CVE-2024-31487",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-31487",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-07-15T17:19:28.109529Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@fortinet.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.9,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 4.2,
"exploitabilityScore": 1.6
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@fortinet.com",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortisandbox:2.4.0:*:*:*:*:*:*:*"
],
"vendor": "Fortinet",
"product": "FortiSandbox",
"versions": [
{
"status": "affected",
"version": "4.4.0",
"versionType": "semver",
"lessThanOrEqual": "4.4.4"
},
{
"status": "affected",
"version": "4.2.1",
"versionType": "semver",
"lessThanOrEqual": "4.2.6"
},
{
"status": "affected",
"version": "4.0.0",
"versionType": "semver",
"lessThanOrEqual": "4.0.6"
},
{
"status": "affected",
"version": "3.2.0",
"versionType": "semver",
"lessThanOrEqual": "3.2.4"
},
{
"status": "affected",
"version": "3.1.0",
"versionType": "semver",
"lessThanOrEqual": "3.1.5"
},
{
"status": "affected",
"version": "3.0.0",
"versionType": "semver",
"lessThanOrEqual": "3.0.7"
},
{
"status": "affected",
"version": "2.5.0",
"versionType": "semver",
"lessThanOrEqual": "2.5.2"
},
{
"status": "affected",
"version": "2.4.0",
"versionType": "semver",
"lessThanOrEqual": "2.4.1"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*"
],
"vendor": "fortinet",
"product": "fortisandbox",
"versions": [
{
"status": "affected",
"version": "4.4.0",
"versionType": "semver",
"lessThanOrEqual": "4.4.4"
},
{
"status": "affected",
"version": "4.2.0",
"versionType": "semver",
"lessThanOrEqual": "4.2.6"
},
{
"status": "affected",
"version": "4.0.0",
"versionType": "semver",
"lessThanOrEqual": "4.0.5"
},
{
"status": "affected",
"version": "3.2.0",
"versionType": "semver",
"lessThanOrEqual": "3.2.4"
},
{
"status": "affected",
"version": "3.1.0",
"versionType": "semver",
"lessThanOrEqual": "3.1.5"
},
{
"status": "affected",
"version": "3.0.0",
"versionType": "semver",
"lessThanOrEqual": "3.0.7"
},
{
"status": "affected",
"version": "2.5.0",
"versionType": "semver",
"lessThanOrEqual": "2.5.2"
},
{
"status": "affected",
"version": "2.4.0",
"versionType": "semver",
"lessThanOrEqual": "2.4.1"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2024-04-09T15:15:31.753",
"references": [
{
"url": "https://fortiguard.com/psirt/FG-IR-24-060",
"tags": [
"Vendor Advisory"
],
"source": "psirt@fortinet.com"
},
{
"url": "https://fortiguard.com/psirt/FG-IR-24-060",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@fortinet.com",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to information disclosure via crafted http requests."
},
{
"lang": "es",
"value": "Una limitación inadecuada de un nombre de ruta a un directorio restringido (\"path traversal\") en Fortinet FortiSandbox versión 4.4.0 a 4.4.4 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.5 y 3.2.0 a 3.2. 4 y 3.1.0 a 3.1.5 y 3.0.0 a 3.0.7 y 2.5.0 a 2.5.2 y 2.4.0 a 2.4.1 pueden permitir al atacante la divulgación de información a través de solicitudes http manipuladas."
}
],
"lastModified": "2026-06-17T07:28:31.867",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "521481E8-AA41-431A-BAD7-1865B4576E85",
"versionEndExcluding": "4.2.7",
"versionStartIncluding": "2.4.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C77A903-42B3-41D3-BDC6-E138679B5400",
"versionEndExcluding": "4.4.5",
"versionStartIncluding": "4.4.0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@fortinet.com"
}