⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2018-13382

CRITICAL · 9.5 CVSS Gepubliceerd: 10-01-2022 CWE-285

Beschrijving

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Required action: Apply updates per vendor instructions.

Vendors

Fortinet

Affected products

Fortios And Fortiproxy

References

nvd.nist.gov