← CVE Radar
CVE-2018-13374Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
4.3 MEDIUMEPSS 38.08%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 4.3 | MEDIUM | 3.1fortinet (CNA) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| 4.0 | MEDIUM | 2.0NVD | AV:N/AC:L/Au:S/C:P/I:N/A:N |
CISA required action
⚡ Known exploited · remediation due Sep 29, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2018-13374
- Status
- Analyzed
- Assigner (CNA)
- fortinet
- Published
- Jan 22, 2019
- Last modified
- 2026-10-01 19:17 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
FortinetFortinet FortiOS, fortiADC1 version range
- FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4