Fortinet FortiOS CVE-2018-13382 Authorization Bypass Vulnerability
BID:108697
CVE-2018-13382 |Info
Fortinet FortiOS CVE-2018-13382 Authorization Bypass Vulnerability
| Bugtraq ID: | 108697 |
| Class: | Access Validation Error |
| CVE: |
CVE-2018-13382 |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2019 12:00AM |
| Updated: | May 24 2019 12:00AM |
| Credit: | Meh Chang and Orange Tsai from DEVCORE Security Research Team. |
| Vulnerable: |
Fortinet Fortios 6.0.4 Fortinet Fortios 6.0.3 Fortinet Fortios 6.0.2 Fortinet Fortios 6.0.1 Fortinet Fortios 6.0 Fortinet Fortios 5.6.8 Fortinet Fortios 5.6.7 Fortinet Fortios 5.6.6 Fortinet Fortios 5.6.5 Fortinet Fortios 5.6.4 Fortinet Fortios 5.6.3 Fortinet Fortios 5.6.2 Fortinet Fortios 5.6 Fortinet Fortios 5.4.10 Fortinet Fortios 5.4.9 Fortinet Fortios 5.4.8 Fortinet Fortios 5.4.7 Fortinet Fortios 5.4.6 Fortinet Fortios 5.4.5 Fortinet Fortios 5.4.4 Fortinet Fortios 5.4.3 Fortinet Fortios 5.4.2 Fortinet Fortios 5.4.1 Fortinet Fortios 5.6.1 |
| Not Vulnerable: |
Fortinet Fortios 6.2 Fortinet Fortios 6.0.5 Fortinet Fortios 5.6.9 Fortinet Fortios 5.4.11 |
Discussion
Fortinet FortiOS CVE-2018-13382 Authorization Bypass Vulnerability
Fortinet FortiOS is prone to an authorization-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Fortinet FortiOS 5.4.1 through 5.4.10, 5.6.0 to 5.6.8, and 6.0.0 through 6.0.4 are vulnerable.
Fortinet FortiOS is prone to an authorization-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Fortinet FortiOS 5.4.1 through 5.4.10, 5.6.0 to 5.6.8, and 6.0.0 through 6.0.4 are vulnerable.
Exploit / POC
Fortinet FortiOS CVE-2018-13382 Authorization Bypass Vulnerability
Attackers can exploit this issue using a web-browser.
Attackers can exploit this issue using a web-browser.