Medium

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited1 source record

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server. CISA required action: Apply updates per vendor instructions.

Announced 8 Sept 2022Source revision 1

Original source ↗

CVE-2018-13374

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-13374

FortiOS and FortiADC

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-13374
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2018-13374 · Medium

Fortinet FortiOS, fortiADC

Event: #1442 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:02:37 GMT
Publisher date: Thu, 08 Sep 2022 00:00:00 GMT

Read the original announcement