VulnScan

CVE-2018-13379

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

Analyzing data...

Overview

Original source data

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

Affected products and scope

Analyzing data...

Technical details

Analyzing data...

Exploitability

Analyzing data...

Technical impact

Analyzing data...

Business impact

Analyzing data...

Remediation

Analyzing data...

Detection

Analyzing data...
Sources (9)
GCVE / Vulnerability-Lookup
CVE Program
fortinet (CNA)
NVD
FIRST EPSS
CISA Known Exploited Vulnerabilities
known-exploited-vulnerabilities-catalog
fortiguard.com
FG-IR-20-233
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

Fortinet FortiOS, FortiProxy

Fortinet

View product
View all security vulnerabilities