CVE-2018-13382

KEV · Ransomware

Fortinet FortiOS and FortiProxy Improper Authorization

Vendor / Project: Fortinet
Product: FortiOS and FortiProxy
Date added: Jan 10, 2022
Due date: Jul 10, 2022
Known ransomware use: Known
CWEs: CWE-285

Description

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-13382