critical
CISA KEV
Ransomware
CVE-2018-13379
Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Description
Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.
Required action
Apply updates per vendor instructions.
Federal remediation due May 3, 2022 — past due
Advertisement