Vulnerability identifier: #VU18609

Vulnerability risk: High

CVSSv3.1: 7.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C]

CVE-ID: CVE-2018-13379

CWE-ID: CWE-22

Exploitation vector: Network

Exploits in database: 5

• June 17, 2021
  • FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure [Exploit-DB]
  • FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit) [Exploit-DB]
• May 9, 2021
  • FortiOS Path Traversal Credential Gatherer [Metasploit]
• December 11, 2020
  • fortios_vpnssl_traversal_leak (This module massively scan and exploit a path traversal vulnerability in the FortiOS SSL VPN web portal may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests [Github]
• March 18, 2020
  • FortiOS-Credentials-Disclosure (CVE-2018-13379 Exploit) [Github]

Impact: Information disclosure

Vulnerable software:
FortiOS
Operating systems & Components / Operating system

Vendor: Fortinet, Inc