CVE-2018-13374: FortiGate & FortiADC - Read-only admins can obtain the LDAP credentials configured in the FortiGate and FortiADC using the LDAP test connectivity feature
First published: Tue Jan 22 2019(Updated: )
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
Credit: psirt@fortinet.com psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiOS | <=5.6.7 | |
| Fortinet FortiOS | >=6.0.0<=6.0.2 | |
| Fortinet FortiADC | >=5.4.0<=5.4.4 | |
| Fortinet FortiADC | =6.0.0 | |
| Fortinet FortiADC | =6.0.1 | |
| Fortinet FortiADC | =6.1.0 | |
| Fortinet FortiOS and FortiADC | ||
| >=5.4.0<=5.4.4 | ||
| =6.0.0 | ||
| =6.0.1 | ||
| =6.1.0 | ||
| <=5.6.7 | ||
| >=6.0.0<=6.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/weakness
- collector/fortiguard-psirt
- source/FortiGuard
- alias/CVE-2018-13374
- agent/title
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/softwarecombine
- agent/event
- collector/nvd-cve
- agent/tags
- vendor/fortinet
- canonical/fortinet fortios
- version/fortinet fortios/5.6.7
- version/fortinet fortios/6.0.0
- version/fortinet fortios/6.0.2
- canonical/fortinet fortiadc
- version/fortinet fortiadc/5.4.0
- version/fortinet fortiadc/5.4.4
- version/fortinet fortiadc/6.0.0
- version/fortinet fortiadc/6.0.1
- version/fortinet fortiadc/6.1.0
- canonical/fortinet fortios and fortiadc