{"id":"CVE-2018-13376","aliases":["EUVD-2018-5320","GHSA-2vhw-3h86-29h4"],"status":"published","title":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5...","description":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02119,"percentile":0.82,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-11-27T15:00:00Z","modified":"2026-06-17T01:39:17Z","products":[{"vendor":"fortinet","product":"fortinet fortios"},{"vendor":"fortinet","product":"fortios"},{"vendor":"fortinet, inc.","product":"fortinet fortios"}],"references":[{"url":"http://www.securityfocus.com/bid/106036","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-325","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13376"},{"url":"https://github.com/advisories/GHSA-2vhw-3h86-29h4"}],"sources":{"cve":[{"id":"CVE-2018-13376","description":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.","status":"published","published":"2018-11-27T15:00:00Z","modified":"2024-10-25T14:31:22.847Z","updated_at":"2026-11-02T14:35:07.01498Z"}],"euvd":[{"id":"EUVD-2018-5320","description":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.","status":"published","published":"2018-11-27T15:00:00Z","modified":"2024-10-25T14:31:22Z","updated_at":"2026-11-03T00:05:18.23832Z"}],"ghsa":[{"id":"GHSA-2vhw-3h86-29h4","title":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5...","description":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.","status":"published","published":"2022-05-13T01:49:47Z","modified":"2023-02-02T05:01:55Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T14:51:17.99492Z"}],"nvd":[{"id":"CVE-2018-13376","description":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.","status":"published","published":"2018-11-27T15:29:00.227Z","modified":"2026-06-17T01:39:17.883Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}