Skip to main content
critical CISA KEV Ransomware

CVE-2018-13379

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

// Description

Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.

// Required action

Apply updates per vendor instructions.

Federal remediation due May 3, 2022 — past due

Advertisement

// Coverage