THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2018-13374 (MEDIUM 4.3) — A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server in

[NVD] CVE-2018-13374 (MEDIUM 4.3) — A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server in

lownvdPublished 2019-01-22

CVE-2018-13374 CVSS: 4.3 MEDIUM Published: 2019-01-22T14:29:00.220

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2018-13374cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2018-13374