Skip to main content
IMMUNITYSEC

CVE-2018-13379

9.1
CRITICAL
CVSS 3.1
EPSS 100.0% · 100th pctCISA KEV · Exploited in the wild
2019-06-04•Updated 2025-10-21•KEV 2021-11-03
CISA Known Exploited Vulnerabilities

Fortinet FortiOS SSL VPN Path Traversal Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV
2021-11-03
Remediation due
2022-05-03
Ransomware
Known use

Required action
Apply updates per vendor instructions.

CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2018-13379

Description

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

Severity

CVSS 3.1 · CNA9.1 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
SSVC · CISA-ADP
Exploitationactive
Automatableyes
Technical impactpartial

Affected Products

VendorProductAffected versions
FortinetFortinet FortiOS, FortiProxy
FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12, FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7

References

2 Links

Record Details

Published
2019-06-04
Last updated
2025-10-21
Assigner (CNA)
fortinet
Credited to
-

More from Fortinet

CVE-2022-406849.8

Fortinet Multiple Products Authentication Bypass Vulnerability

CVE-2025-252579.6

Fortinet FortiWeb SQL Injection Vulnerability

CVE-2022-424759.3

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

CVE-2023-487889.3

Fortinet FortiClient EMS SQL Injection Vulnerability

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.