FortiSandbox - Arbitrary file read on endpoint

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability |CWE-22] in FortiSandbox may allow an authenticated attacker with at least read-only permission to read arbitrary files via crafted http requests.

arbitrary files attacker cwe directory endpoint file files http http requests may path path traversal permission requests restricted vulnerability