Security Advisory

CVE-2018-13379

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-04 20:18:08

Last updated 2025-10-21 23:45:35

Assigner fortinet

State PUBLISHED

Description

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

← Browse all CVEs View on cve.org ↗