CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization

Known ransomware use CISA KEV listed Added January 10, 2022 Remediate by July 10, 2022

Description

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-13382

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer