{"id":"CVE-2018-13382","aliases":["EUVD-2018-5326","GHSA-chg2-j3mj-m3rj"],"status":"published","title":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...","description":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.81691,"percentile":0.99646,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-285","CWE-863"],"published":"2019-06-04T20:33:53Z","modified":"2026-06-17T01:39:18Z","kev":{"date_added":"2022-01-10","due_date":"2022-07-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2022-01-10"},{"source":"kev","since":"2022-01-10"}],"exploits":[{"source":"pocgithub","id":"milo2012/CVE-2018-13382","title":"milo2012/CVE-2018-13382","date":"2019-08-11","url":"https://github.com/milo2012/CVE-2018-13382"},{"source":"exploitdb","id":"EDB-49074","title":"Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification","type":"webapps","platform":"hardware","date":"2020-11-19","url":"https://www.exploit-db.com/exploits/49074"},{"source":"pocgithub","id":"tumikoto/Exploit-FortinetMagicBackdoor","title":"tumikoto/Exploit-FortinetMagicBackdoor","date":"2021-04-28","url":"https://github.com/tumikoto/Exploit-FortinetMagicBackdoor"},{"source":"pocgithub","id":"cojoben/CVE-2018-13382","title":"cojoben/CVE-2018-13382","date":"2025-02-26","url":"https://github.com/cojoben/CVE-2018-13382"}],"products":[{"vendor":"fortinet","product":"fortinet fortios, fortiproxy"},{"vendor":"fortinet","product":"fortios"},{"vendor":"fortinet","product":"fortios and fortiproxy"},{"vendor":"fortinet","product":"fortiproxy"}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-389","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-231","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13382","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382"},{"url":"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"},{"url":"http://packetstormsecurity.com/files/160130/Fortinet-FortiOS-6.0.4-Password-Modification.html"},{"url":"http://www.securityfocus.com/bid/108697"},{"url":"https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn"},{"url":"https://github.com/advisories/GHSA-chg2-j3mj-m3rj"}],"sources":{"cve":[{"id":"CVE-2018-13382","description":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests","status":"published","published":"2019-06-04T20:33:53Z","modified":"2025-10-21T23:45:35.394Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:35:07.01498Z"}],"euvd":[{"id":"EUVD-2018-5326","description":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests","status":"published","published":"2019-06-04T20:33:53Z","modified":"2025-10-21T23:45:35Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"exploited_since":"2022-01-10","updated_at":"2026-11-02T20:31:24.172282Z"}],"ghsa":[{"id":"GHSA-chg2-j3mj-m3rj","title":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...","description":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests.","status":"published","published":"2022-05-24T16:47:09Z","modified":"2025-10-22T00:32:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-285","CWE-863"],"updated_at":"2026-11-02T15:04:06.493434Z"}],"kev":[{"id":"CVE-2018-13382","title":"Fortinet FortiOS and FortiProxy Improper Authorization","description":"An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.","cwes":["CWE-285"],"kev":{"date_added":"2022-01-10","due_date":"2022-07-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2018-13382","description":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests","status":"published","published":"2019-06-04T21:29:00.373Z","modified":"2026-06-17T01:39:18.57Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:04:57.307075Z"}]}}