Lucene search
FortiGuard LabsFG-IR-18-389HistoryAug 30, 2019 - 12:00 a.m.
Protect
2019-08-3000:00:00
FortiGuard Labs
www.fortiguard.com
20
0.891 High
EPSS
Percentile
98.8%
An Improper Authorization vulnerability in the SSL VPN web portal may allow an unauthenticated attacker to change the password of an SSL VPN web portal user via specially crafted HTTP requests.
Related
fortinet
fortinet
FortiProxy - Unauthenticated SSL VPN users password modification
2021-06-01 00:00:00
cvelist
cvelist
CVE-2018-13382
2019-06-04 20:33:53
nvd
nvd
CVE-2018-13382
2019-06-04 21:29:00
attackerkb
attackerkb
CVE-2018-13382
2019-06-04 00:00:00
prion
prion
Authorization
2019-06-04 21:29:00
cve
cve
CVE-2018-13382
2019-06-04 21:29:00
packetstorm
packetstorm
Fortinet FortiOS 6.0.4 Password Modification
2020-11-19 00:00:00
nessus
nessus
cisa_kev
cisa_kev
Fortinet FortiOS and FortiProxy Improper Authorization
2022-01-10 00:00:00
exploitdb
exploitdb
Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification
2020-11-19 00:00:00
threatpost
threatpost
APT Groups Exploiting Flaws in Unpatched VPNs, Officials Warn
2019-10-08 12:44:16
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00
ics
ics