Fortinet FortiManager and FortiAnalyzer CVE-2018-13375 Cross Site Scripting Vulnerability

Bugtraq ID:	108502
Class:	Input Validation Error
CVE:	CVE-2018-13375
Remote:	Yes
Local:	No
Published:	Nov 16 2018 12:00AM
Updated:	Nov 16 2018 12:00AM
Credit:	Adrian Dabrowski of SBA Research gGmbH Sitz.
Vulnerable:	Fortinet FortiManager 5.6 Fortinet FortiManager 5.4.4 Fortinet FortiManager 5.4.2 Fortinet FortiManager 5.4.1 Fortinet FortiManager 5.4 Fortinet FortiManager 5.2.8 Fortinet FortiManager 5.2.7 Fortinet FortiManager 5.2.6 Fortinet FortiManager 5.2.5 Fortinet FortiManager 5.2.2 Fortinet FortiManager 5.2.1 Fortinet FortiManager 5.2 Fortinet FortiManager 5.0.12 Fortinet FortiManager 5.0.11 Fortinet FortiManager 5.0.10 Fortinet FortiManager 5.0.9 Fortinet FortiManager 5.0.8 Fortinet FortiManager 5.0.7 Fortinet FortiManager 5.0.6 Fortinet FortiManager 5.0.5 Fortinet FortiManager 5.0.4 Fortinet FortiManager 5.0.3 Fortinet FortiManager 5.0.2 Fortinet FortiManager 5.0.1 Fortinet FortiManager 5.0 Fortinet FortiManager 3.0 Fortinet FortiManager 5.2.4 Fortinet FortiManager 5.2.3 Fortinet FortiManager 5.0 Fortinet FortiManager 4.3 Fortinet FortiManager 3.0 Fortinet FortiAnalyzer 5.6 Fortinet FortiAnalyzer 5.4.1 Fortinet FortiAnalyzer 5.4 Fortinet FortiAnalyzer 5.2.6 Fortinet FortiAnalyzer 5.2.5 Fortinet FortiAnalyzer 5.2.3 Fortinet FortiAnalyzer 5.2.2 Fortinet FortiAnalyzer 5.2.1 Fortinet FortiAnalyzer 5.0.13 Fortinet FortiAnalyzer 5.0.12 Fortinet FortiAnalyzer 5.0.11 Fortinet FortiAnalyzer 5.0.10 Fortinet FortiAnalyzer 5.0.9 Fortinet FortiAnalyzer 5.0.7 Fortinet FortiAnalyzer 5.0.5 Fortinet FortiAnalyzer 5.0.4 Fortinet FortiAnalyzer 5.0 Fortinet FortiAnalyzer 4.3.7 Fortinet FortiAnalyzer 4.3.6 Fortinet FortiAnalyzer 3.0
Not Vulnerable:	Fortinet FortiManager 5.6.1 Fortinet FortiAnalyzer 5.6.1

Fortinet FortiManager and FortiAnalyzer CVE-2018-13375 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.