CVE-2018-13374
Published 2019-01-22 · Updated 2026-10-01 · Source psirt@fortinet.com
Summary
CVE-2018-13374 is a medium-severity (CVSS 4.3) vulnerability in Fortinet FortiOS and FortiADC. CISA added it to the Known Exploited Vulnerabilities catalog on September 8, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by September 29, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Fortinet has 32 vulnerabilities in the KEV catalog, 14 of them linked to ransomware.
All 32 known-exploited Fortinet vulnerabilities →Description
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA Known-Exploited Vulnerability
Product: Fortinet — FortiOS and FortiADC
Name: Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
Date added: 2022-09-08 · Due: 2022-09-29
Required action: Apply updates per vendor instructions.