HexBrain

Browse / CVEs / CVE-2018-13382

CVE-2018-13382· fortinet / fortios and fortiproxy· CWE-285

Fortinet FortiOS and FortiProxy Improper Authorization

Exploited in the wild. Listed by CISA on 2022-01-10; known to be used by ransomware.

81.7%likelihood of exploitation, next 30 days
100%of all CVEs are less likely
Nonecheck to confirm it

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

Use this check only on systems you are authorised to test. Where the data comes from