Unrated severityCISA KEVNVD Advisory· Published Jan 22, 2019· Updated Oct 21, 2025

CVE-2018-13374

Description

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortinet/Fortiosllm-fuzzy
Range: <=5.6.7, 6.0.2
Fortinet/Fortiadc 200dllm-fuzzy
Range: 6.1.0, 6.0.0-6.0.1, 5.4.0-5.4.4
Fortinet/Fortinetcpe-rescue
Range: FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4

Patches

Vulnerability mechanics

References

fortiguard.com/advisory/FG-IR-18-157mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.030
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.060