CVE-2018-13374: FortiGate & FortiADC - Read-only admins can obtain the LDAP credentials configured in the FortiGate and FortiADC using the LDAP test connectivity feature
First published: Tue Jan 22 2019(Updated: )
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
Credit: psirt@fortinet.com psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiOS | ||
| Fortinet FortiADC | >=5.4.0<5.4.5 | |
| Fortinet FortiADC | >=6.0.0<6.0.2 | |
| Fortinet FortiADC | =6.1.0 | |
| FortiOS | <6.0.3 | |
| FortiOS | <=5.6.7 | |
| FortiOS | >=6.0.0<=6.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-13374?
CVE-2018-13374 has been classified as a high severity vulnerability due to improper access control allowing attackers to obtain sensitive LDAP server login credentials.
How do I fix CVE-2018-13374?
To mitigate CVE-2018-13374, upgrade FortiOS to version 6.0.3 or later, or any version above 5.6.7.
Which products are affected by CVE-2018-13374?
CVE-2018-13374 affects Fortinet FortiOS versions 5.6.7 and earlier, and versions 6.0.0 to 6.0.2, along with FortiADC versions 6.1.0, 6.0.0 to 6.0.1, and 5.4.0 to 5.4.4.
What type of attack does CVE-2018-13374 enable?
CVE-2018-13374 enables attackers to obtain sensitive LDAP server credentials by directing requests to a rogue LDAP server.
Is there a workaround for CVE-2018-13374?
Currently, the recommended action for CVE-2018-13374 is to update to the latest secure versions, as there are no effective workarounds.
- agent/type
- agent/weakness
- collector/fortiguard-psirt
- source/FortiGuard
- alias/CVE-2018-13374
- agent/title
- agent/description
- agent/author
- agent/severity
- agent/first-publish-date
- agent/references
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- collector/nvd-index
- collector/nvd-cve
- vendor/fortinet
- canonical/fortinet fortios
- canonical/fortinet fortiadc
- version/fortinet fortiadc/5.4.0
- version/fortinet fortiadc/6.0.0
- version/fortinet fortiadc/6.1.0
- canonical/fortios
- version/fortios/5.6.7
- version/fortios/6.0.0
- version/fortios/6.0.2