Lucene search

CVE-2018-13379 Path Traversal in Fortinet FortiOS

🗓️ 04 Jun 2019 00:00:00Reported by AttackerKBType

CVE-2018-13379 Path Traversal in Fortinet FortiOS allowing system file download via SSL VPN web porta

Reporter	Title	Published	Views	Family All 119
CISA	FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities	2 Apr 202100:00	–	cisa
CISA	NSA-CISA-FBI Joint Advisory on Russian SVR Targeting U.S. and Allied Networks	15 Apr 202100:00	–	cisa
AttackerKB	CVE-2019-5591	14 Aug 202000:00	–	attackerkb
AttackerKB	CVE-2020-12812	24 Jul 202000:00	–	attackerkb
ThreatPost	FBI: APTs Actively Exploiting Fortinet VPN Bugs	2 Apr 202119:56	–	threatpost
ThreatPost	Unpatched Fortinet Bug Allows Firewall Takeovers	18 Aug 202112:07	–	threatpost
ThreatPost	Exchange, Fortinet Flaws Being Exploited by Iranian APT, CISA Warns	17 Nov 202117:04	–	threatpost
ThreatPost	Hackers Exploit Fortinet Flaw in Sophisticated Cring Ransomware Attacks	8 Apr 202114:00	–	threatpost
ThreatPost	Thousands of Fortinet VPN Account Credentials Leaked	9 Sep 202122:49	–	threatpost
ThreatPost	Accenture Confirms LockBit Ransomware Attack	11 Aug 202121:56	–	threatpost

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/108693
fortiguard	www.fortiguard.com/advisory/FG-IR-18-384
fortiguard	www.fortiguard.com/psirt/FG-IR-20-233
i	www.i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
devco	www.devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn
packetstormsecurity	www.packetstormsecurity.com/files/154146/FortiOS-5.6.7-6.0.4-Credential-Disclosure.html
packetstormsecurity	www.packetstormsecurity.com/files/154147/FortiOS-5.6.7-6.0.4-Credential-Disclosure.html
devco	www.devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/
github	www.github.com/blacklotuslabs/Development/blob/master/Mitigations/CVE/CVE-2018-13379/CVE-2018-13379%20-%20Summary%20%26%20Emergency%20Mitigations.pdf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2019 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS27.5

CVSS39.1 - 9.8

EPSS0.96924