CVE-2018-13374 Fortinet FortiOS And FortiADC
Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.
- CVSS
- not scored
On CISA’s exploited list
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
- Added
- 2022-09-08
- Federal patch deadline
- 2022-09-29
- Ransomware use
- known