CVE-2018-13379—Fortinet FortiOS SSL VPN Path Traversal Vulnerability

漏洞名称

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

描述

Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2018-13379

相关新闻文章

• Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsFebruary 26, 2025
• CISA and FBI: Ghost ransomware breached orgs in 70 countriesFebruary 19, 2025
• 15K Fortinet Device Configs Leaked to the Dark WebJanuary 17, 2025

相关 CWE

• CWE-22