Fortigate SSL VPN Arbitrary File reading (CVE-2018-13379)
Severity:
High
Summary
Invicti detected Fortigate SSL VPN Arbitrary File reading (CVE-2018-13379)
A directory traversal vulnerability exists on Fortigate SSL VPN. An attacker can craft a request that accesses potentially sensitive information in the Fortigate's filesystem.
Impact
An attacker could exploit this vulnerability to gain unauthorized read access to sensitive files including users VPN credentials.
Remediation
Upgrade to the latest version of FortiOS
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Build your resistance to threats. And save hundreds of hours each month.
