CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-13382

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests

Exploit prediction scoring system (EPSS) score

EPSS Score 0.867

EPSS Ranking 99.4%

CVSS Severity

CVSS v3 Score 9.1

CVSS v2 Score 5.0

Proposed Action

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Ransomware Campaign

Known

References

Products affected by CVE-2018-13382

Fortinet » Fortiproxy » Version: 1.0.0

cpe:2.3:a:fortinet:fortiproxy:1.0.0
Fortinet » Fortiproxy » Version: 1.0.1

cpe:2.3:a:fortinet:fortiproxy:1.0.1
Fortinet » Fortiproxy » Version: 1.0.2

cpe:2.3:a:fortinet:fortiproxy:1.0.2
Fortinet » Fortiproxy » Version: 1.0.3

cpe:2.3:a:fortinet:fortiproxy:1.0.3
Fortinet » Fortiproxy » Version: 1.0.4

cpe:2.3:a:fortinet:fortiproxy:1.0.4
Fortinet » Fortiproxy » Version: 1.0.5

cpe:2.3:a:fortinet:fortiproxy:1.0.5
Fortinet » Fortiproxy » Version: 1.0.6

cpe:2.3:a:fortinet:fortiproxy:1.0.6
Fortinet » Fortiproxy » Version: 1.0.7

cpe:2.3:a:fortinet:fortiproxy:1.0.7
Fortinet » Fortiproxy » Version: 1.1.0

cpe:2.3:a:fortinet:fortiproxy:1.1.0
Fortinet » Fortiproxy » Version: 1.1.1

cpe:2.3:a:fortinet:fortiproxy:1.1.1
Fortinet » Fortiproxy » Version: 1.1.2

cpe:2.3:a:fortinet:fortiproxy:1.1.2
Fortinet » Fortiproxy » Version: 1.1.3

cpe:2.3:a:fortinet:fortiproxy:1.1.3
Fortinet » Fortiproxy » Version: 1.1.4

cpe:2.3:a:fortinet:fortiproxy:1.1.4
Fortinet » Fortiproxy » Version: 1.1.5

cpe:2.3:a:fortinet:fortiproxy:1.1.5
Fortinet » Fortiproxy » Version: 1.1.6

cpe:2.3:a:fortinet:fortiproxy:1.1.6
Fortinet » Fortiproxy » Version: 1.2.0

cpe:2.3:a:fortinet:fortiproxy:1.2.0
Fortinet » Fortiproxy » Version: 1.2.1

cpe:2.3:a:fortinet:fortiproxy:1.2.1
Fortinet » Fortiproxy » Version: 1.2.2

cpe:2.3:a:fortinet:fortiproxy:1.2.2
Fortinet » Fortiproxy » Version: 1.2.3

cpe:2.3:a:fortinet:fortiproxy:1.2.3
Fortinet » Fortiproxy » Version: 1.2.4

cpe:2.3:a:fortinet:fortiproxy:1.2.4
Fortinet » Fortiproxy » Version: 1.2.5

cpe:2.3:a:fortinet:fortiproxy:1.2.5
Fortinet » Fortiproxy » Version: 1.2.6

cpe:2.3:a:fortinet:fortiproxy:1.2.6
Fortinet » Fortiproxy » Version: 1.2.7

cpe:2.3:a:fortinet:fortiproxy:1.2.7
Fortinet » Fortiproxy » Version: 1.2.8

cpe:2.3:a:fortinet:fortiproxy:1.2.8
Fortinet » Fortiproxy » Version: 2.0.0

cpe:2.3:a:fortinet:fortiproxy:2.0.0
Fortinet » Fortios » Version: 5.4.1

cpe:2.3:o:fortinet:fortios:5.4.1
Fortinet » Fortios » Version: 5.4.10

cpe:2.3:o:fortinet:fortios:5.4.10
Fortinet » Fortios » Version: 5.4.2

cpe:2.3:o:fortinet:fortios:5.4.2
Fortinet » Fortios » Version: 5.4.3

cpe:2.3:o:fortinet:fortios:5.4.3
Fortinet » Fortios » Version: 5.4.4

cpe:2.3:o:fortinet:fortios:5.4.4
Fortinet » Fortios » Version: 5.4.5

cpe:2.3:o:fortinet:fortios:5.4.5
Fortinet » Fortios » Version: 5.4.6

cpe:2.3:o:fortinet:fortios:5.4.6
Fortinet » Fortios » Version: 5.4.7

cpe:2.3:o:fortinet:fortios:5.4.7
Fortinet » Fortios » Version: 5.4.8

cpe:2.3:o:fortinet:fortios:5.4.8
Fortinet » Fortios » Version: 5.4.9

cpe:2.3:o:fortinet:fortios:5.4.9
Fortinet » Fortios » Version: 5.6.0

cpe:2.3:o:fortinet:fortios:5.6.0
Fortinet » Fortios » Version: 5.6.1

cpe:2.3:o:fortinet:fortios:5.6.1
Fortinet » Fortios » Version: 5.6.2

cpe:2.3:o:fortinet:fortios:5.6.2
Fortinet » Fortios » Version: 5.6.3

cpe:2.3:o:fortinet:fortios:5.6.3
Fortinet » Fortios » Version: 5.6.4

cpe:2.3:o:fortinet:fortios:5.6.4
Fortinet » Fortios » Version: 5.6.5

cpe:2.3:o:fortinet:fortios:5.6.5
Fortinet » Fortios » Version: 5.6.6

cpe:2.3:o:fortinet:fortios:5.6.6
Fortinet » Fortios » Version: 5.6.7

cpe:2.3:o:fortinet:fortios:5.6.7
Fortinet » Fortios » Version: 5.6.8

cpe:2.3:o:fortinet:fortios:5.6.8
Fortinet » Fortios » Version: 6.0.0

cpe:2.3:o:fortinet:fortios:6.0.0
Fortinet » Fortios » Version: 6.0.1

cpe:2.3:o:fortinet:fortios:6.0.1
Fortinet » Fortios » Version: 6.0.2

cpe:2.3:o:fortinet:fortios:6.0.2
Fortinet » Fortios » Version: 6.0.3

cpe:2.3:o:fortinet:fortios:6.0.3
Fortinet » Fortios » Version: 6.0.4

cpe:2.3:o:fortinet:fortios:6.0.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-13382

Products

Pricing

Contact Us