CVE-2018-13379—Fortinet FortiOS SSL VPN Path Traversal Vulnerability

PUBLISHEDvulnerability record

2021-11-03 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2018-13379
Project:: Fortinet
Product:: FortiOS
Date Added:: 2021-11-03
Due Date:: 2022-05-03
Last Updated:: June 21, 2025

Vulnerability Name

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

Description

Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

Related Weaknesses

browse all CVEs