CVE-2018-13382

🗓️ 04 Jun 2019 20:33:53Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1317 Views

Improper Authorization vulnerability in Fortinet FortiOS & FortiProx

Reporter	Title	Published	Views	Family All 20
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics
ATTACKERKB	CVE-2018-13382	4 Jun 201900:00	–	attackerkb
Circl	CVE-2018-13382	5 Jun 201900:26	–	circl
CISA KEV Catalog	Fortinet FortiOS and FortiProxy Improper Authorization	10 Jan 202200:00	–	cisa_kev
CISA	CISA Adds 15 Known Exploited Vulnerabilities to Catalog	10 Jan 202200:00	–	cisa
CNVD	Fortinet FortiOS Authorization Issues Vulnerability	27 May 201900:00	–	cnvd
Cvelist	CVE-2018-13382	4 Jun 201920:33	–	cvelist
Exploit DB	Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification	19 Nov 202000:00	–	exploitdb
Fortinet	Protect	30 Aug 201900:00	–	fortinet
Fortinet	FortiProxy - Unauthenticated SSL VPN users password modification	1 Jun 202100:00	–	fortinet

NVD

Node

fortinet fortiproxyRange<1.2.9

fortinet fortiproxyMatch2.0.0

fortinet fortiosRange5.4.1–5.4.11

fortinet fortiosRange5.6.0–5.6.9

fortinet fortiosRange6.0.0–6.0.5

[
  {
    "product": "Fortinet FortiOS, FortiProxy",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8, 5.4.1 to 5.4.10, FortiProxy 2.0.0, 1.2.0 to 1.2.8,  1.1.0 to 1.1.6, 1.0.0 to 1.0.7"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-20-231
fortiguard	www.fortiguard.com/advisory/FG-IR-18-389
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

24 Oct 2025 12:52Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5 - 9.1

EPSS0.87082

SSVC