CVE-2018-13365 — Sensitive Information Exposure in Fortinet Fortios

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 53.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortiosFortinet Fortios
Timeline
PublishedMay 29
Latest updateMay 24

Description

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDfortinet/fortios5.6.6 — 6.0.1+1
▶CVEListV5fortinet/fortinet_fortios5.6.5 and below, 6.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-h2c5-p994-gfwf: An Information Exposure vulnerability in Fortinet FortiOS 6↗2022-05-24
▶
CVEList
CVE-2018-13365: An Information Exposure vulnerability in Fortinet FortiOS 6↗2019-05-29
▶

📋Vendor Advisories

1
Fortinet
An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as...↗2019-05-29
▶