CVE-2018-13379

critical · 9.1Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

9.1

CVSS

100.0%

EPSS (exploit prob.)

100th

EPSS percentile

2019-06-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
fortinet	fortiproxy	< 1.2.9
fortinet	fortiproxy	2.0.0
fortinet	fortios	>= 5.4.6, < 5.4.13
fortinet	fortios	>= 5.6.3, < 5.6.8
fortinet	fortios	>= 6.0.0, < 6.0.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-13379