Main
Vulnerability Database
Exploits
ID:5963 - Exploit for Information disclosure in FortiOS - CVE-2018-13374
ID:5963 - Exploit for Information disclosure in FortiOS - CVE-2018-13374
Published: June 17, 2021
Vulnerability identifier: #VU16172
Vulnerability risk: Low
CVE-ID: CVE-2018-13374
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
FortiOS
FortiOS
Link to public exploit:
Vulnerability description
The vulnerability allows a local attacker with admin privileges to obtain potentially sensitive information.
The weakness exists due to information exposure. A Fortigate's read-only admin can point a LDAP server connectivity test request to a rogue LDAP server instead of the configured one to obtain the LDAP server login credentials configured in the FortiGate.
The weakness exists due to information exposure. A Fortigate's read-only admin can point a LDAP server connectivity test request to a rogue LDAP server instead of the configured one to obtain the LDAP server login credentials configured in the FortiGate.
Remediation
Update to version 6.0.3.