CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization

CISA KEVExploited: confirmedFortinet

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Vulnerability details

Affected productsFortiOS and FortiProxy
KEV remediation due2022-07-10