CVE-2018-13382 Fortinet FortiOS And FortiProxy
An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.
- CVSS
- not scored
On CISA’s exploited list
Fortinet FortiOS and FortiProxy Improper Authorization
- Added
- 2022-01-10
- Federal patch deadline
- 2022-07-10
- Ransomware use
- known