{"api_version":"1","generated_at":"2026-07-23T10:21:13+00:00","cve":"CVE-2018-13382","urls":{"html":"https://cve.report/CVE-2018-13382","api":"https://cve.report/api/cve/CVE-2018-13382.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-13382","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382"},"summary":{"title":"CVE-2018-13382","description":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests","state":"PUBLIC","assigner":"psirt@fortinet.com","published_at":"2019-06-04 21:29:00","updated_at":"2021-06-03 11:15:00"},"problem_types":["CWE-285"],"metrics":[],"references":[{"url":"http://www.securityfocus.com/bid/108697","name":"108697","refsource":"BID","tags":[],"title":"Fortinet FortiOS CVE-2018-13382 Authorization Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://fortiguard.com/advisory/FG-IR-18-389","name":"https://fortiguard.com/advisory/FG-IR-18-389","refsource":"CONFIRM","tags":["Mitigation","Vendor Advisory"],"title":"Unauthenticated SSL VPN users password modification | FortiGuard","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/","name":"https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/","refsource":"MISC","tags":[],"title":"Attacking SSL VPN - Part 2: Breaking the Fortigate SSL VPN | DEVCORE","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/160130/Fortinet-FortiOS-6.0.4-Password-Modification.html","name":"http://packetstormsecurity.com/files/160130/Fortinet-FortiOS-6.0.4-Password-Modification.html","refsource":"MISC","tags":[],"title":"Fortinet FortiOS 6.0.4 Password Modification ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-231","name":"https://www.fortiguard.com/psirt/FG-IR-20-231","refsource":"CONFIRM","tags":[],"title":"FortiProxy - Unauthenticated SSL VPN users password modification | FortiGuard","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf","name":"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf","refsource":"MISC","tags":[],"title":"","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13382","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"13382","vulnerable":"1","versionEndIncluding":"5.4.10","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fortinet","cpe5":"fortios","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"13382","vulnerable":"1","versionEndIncluding":"5.6.8","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fortinet","cpe5":"fortios","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"13382","vulnerable":"1","versionEndIncluding":"6.0.4","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fortinet","cpe5":"fortios","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":{"cve_year":"2018","cve_id":"13382","cve":"CVE-2018-13382","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Improper Authorization","dateAdded":"2022-01-10","shortDescription":"An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.","requiredAction":"Apply updates per vendor instructions.","dueDate":"2022-07-10","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382","cwes":"CWE-285","catalogVersion":"2026.07.22","updated_at":"2026-07-22 20:07:16"},"epss":{"cve_year":"2018","cve_id":"13382","cve":"CVE-2018-13382","epss":"0.816910000","percentile":"0.996080000","score_date":"2026-07-22","updated_at":"2026-07-23 00:09:33"},"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2018-13382","ASSIGNER":"psirt@fortinet.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Fortinet","product":{"product_data":[{"product_name":"Fortinet FortiOS, FortiProxy","version":{"version_data":[{"version_value":"FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8, 5.4.1 to 5.4.10, FortiProxy 2.0.0, 1.2.0 to 1.2.8,  1.1.0 to 1.1.6, 1.0.0 to 1.0.7"}]}}]}}]}},"impact":{"cvss":{"attackComplexity":"Low","attackVector":"Network","availabilityImpact":"None","baseScore":8.9,"baseSeverity":"High","confidentialityImpact":"High","integrityImpact":"High","privilegesRequired":"None","scope":"Unchanged","userInteraction":"None","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Access Control"}]}]},"references":{"reference_data":[{"refsource":"CONFIRM","name":"https://fortiguard.com/advisory/FG-IR-18-389","url":"https://fortiguard.com/advisory/FG-IR-18-389"},{"refsource":"CONFIRM","name":"https://www.fortiguard.com/psirt/FG-IR-20-231","url":"https://www.fortiguard.com/psirt/FG-IR-20-231"}]},"description":{"description_data":[{"lang":"eng","value":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests"}]}},"nvd":{"publishedDate":"2019-06-04 21:29:00","lastModifiedDate":"2021-06-03 11:15:00","problem_types":["CWE-285"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.1","versionEndIncluding":"5.4.10","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.8","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"13382","Ordinal":"130031","Title":"CVE-2018-13382","CVE":"CVE-2018-13382","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"13382","Ordinal":"1","NoteData":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests","Type":"Description","Title":null},{"CveYear":"2018","CveId":"13382","Ordinal":"2","NoteData":"2019-06-04","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"13382","Ordinal":"3","NoteData":"2021-06-03","Type":"Other","Title":"Modified"}]}}}