4.3med
CVE-2018-13374KEV · ransomwarein critical feed1 exploit
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to ob…
Published 7 y ago · modified 38 d ago · JSON
CVSS
4.3
v3.1 · CNA
CISA KEV
Yes
added 2022-09-08
EPSS
38.1%
percentile 99%
Public exploits
1
Exploit-DB
Summary
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
Known exploited (CISA KEV)
- Added
- 4 y ago
- Due date
- 2022-09-29 (4 y ago)
- Ransomware use
- Known to be used in ransomware campaigns
- Required action
- Apply updates per vendor instructions.
- Vendor / product
- Fortinet / FortiOS and FortiADC
- CISA name
- Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 mo ago
Exploit prediction (EPSS)
38.09% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- EDB-46171 Fortinet FortiGate FortiOS < 6.0.3 - LDAP Credential Disclosure · webapps · 2019-01-16
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| CNA | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| NVD | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
Affected products
- Fortinet Fortinet FortiOS, fortiADC
Classification
- Weakness
- CWE-732 Incorrect Permission Assignment for Critical Resource
- Technology feeds
- Fortinet (RSS, critical only)
References
- fortiguard.com /advisory/FG-IR-18-157 · x_refsource_CONFIRM, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13374 · government-resource
Sources
- CVE List: CVE-2018-13374
- NVD: CVE-2018-13374
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.