{"id":"CVE-2018-13379","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-13379","generatedAt":"2026-10-29T01:56:06.074Z","title":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","description":"An Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.","published":"2019-06-04T21:29:00.000Z","lastModified":"2026-06-17T01:39:18.000Z","status":"Analyzed","sourceIdentifier":"psirt@fortinet.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-22"],"affected":["fortinet/fortiproxy","fortinet/fortios"],"epss":{"score":0.99999,"percentile":0.99994,"date":"2026-10-27","history":[]},"kev":{"listed":true,"dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-13379"},"exploits":{"count":2,"verified":false,"firstPublished":"2019-08-19","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":47288,"kind":"exploit","title":"Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure","url":"https://www.exploit-db.com/exploits/47288","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/webapps/47288.py","file":"exploits/hardware/webapps/47288.py","published":"2019-08-19","added":"2019-08-19","updated":"2021-04-30","author":"Carlos E. Vieira","type":"webapps","platform":"hardware","port":null,"verified":false,"codes":["CVE-2018-13379"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":47287,"kind":"exploit","title":"Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit)","url":"https://www.exploit-db.com/exploits/47287","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/webapps/47287.rb","file":"exploits/hardware/webapps/47287.rb","published":"2019-08-19","added":"2019-08-19","updated":"2021-04-30","author":"Carlos E. Vieira","type":"webapps","platform":"hardware","port":null,"verified":false,"codes":["CVE-2018-13379"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 3 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-384","tags":["Mitigation","Vendor Advisory"],"source":"psirt@fortinet.com"},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-233","tags":["Vendor Advisory"],"source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-18-384","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-233","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13379","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-13379","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}