Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2018-13379

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

  • Published: Jun 4, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-13379
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortiproxy 2.0.0 2.0.0.x
fortinet / fortios 5.4.6 5.4.13
fortinet / fortios 5.6.3 5.6.8
fortinet / fortios 6.0.0 6.0.5
fortinet / fortiproxy - 1.2.9