Firetruck

CVE-2018-13374

KEV · Ransomware

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

View CVE record →
Vendor / Project
Fortinet
Product
FortiOS and FortiADC
Date added
Sep 8, 2022
Due date
Sep 29, 2022
Known ransomware use
Known
CWEs
CWE-732

Description

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.

Required action

Apply updates per vendor instructions.

Notes