Fortinet has disclosed a vulnerability in FortiSandbox that could allow unauthenticated attackers to gain access to the Virtual Network Computing (VNC) server running on virtual machines used for malware scanning. The flaw, tracked as FG-IR-26-145, is classified under CWE-668 (Exposure of Resource to Wrong Sphere) and stems from improper isolation of internal scanning infrastructure from […]
The post FortiSandbox Flaw Lets Unauthenticated Attackers Access VNC Server on Scanning VMs appeared first on Cyber Security News.