Lucene search

CVE-2018-13379

🗓️ 04 Jun 2019 21:00:29Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 196 Media mentions👁 2068 Views🌐 WEB

CVE-2018-13379 Path Traversal in Fortinet FortiO

Reporter	Title	Published	Views	Family All 101
Cvelist	CVE-2018-13379	4 Jun 201920:18	–	cvelist
Microsoft Secure	Exposing POLONIUM activity and infrastructure targeting Israeli organizations	2 Jun 202216:00	–	mssecure
Microsoft Secure	Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021	16 Nov 202116:00	–	mssecure
Microsoft Secure	Profiling DEV-0270: PHOSPHORUS’ ransomware operations	7 Sep 202221:00	–	mssecure
Microsoft Secure	Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself	9 May 202213:00	–	mssecure
The Hacker News	Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets	8 Apr 202113:12	–	thn
The Hacker News	Data Wiper Malware Disguised As Ransomware Targets Israeli Entities	26 May 202115:30	–	thn
The Hacker News	Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies	3 Jun 202209:19	–	thn
The Hacker News	Hackers Leak VPN Account Passwords From 87,000 Fortinet FortiGate Devices	9 Sep 202107:16	–	thn
The Hacker News	Iranian Hackers Targeting VMware Horizon Log4j Flaws to Deploy Ransomware	18 Feb 202207:40	–	thn

Nvd

Node

fortinet fortiproxyRange<1.2.9

fortinet fortiproxyMatch2.0.0

fortinet fortiosRange5.4.6–5.4.13

fortinet fortiosRange5.6.3–5.6.8

fortinet fortiosRange6.0.0–6.0.5

[
  {
    "product": "Fortinet FortiOS, FortiProxy",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12, FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-20-233
fortiguard	www.fortiguard.com/advisory/FG-IR-18-384

Parameter	Position	Path	Description	CWE
lang	query param	/remote/fgt_lang	Path traversal vulnerability in Fortinet FortiOS allows unauthorized access to SSL VPN web session files.	CWE-22

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2019 21:29Current

9.7High risk

Vulners AI Score9.7

CVSS25

CVSS39.1 - 9.8

EPSS0.96924