BDU%3A2019-02981

Risk Scores

Affected Products

Exploit Intelligence

• CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit warnings. (github-poc-repo)
• CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit warnings. (github-poc)
• CVE-2018-13379 (github-poc-repo)
• CVE-2018-13379 Exploit (github-poc-repo)
• yukar1z0e/CVE-2018-13379 (github-poc-repo)
• CVE-2018-13379 Script for Nmap NSE. (github-poc-repo)
• pwn3z/CVE-2018-13379-FortinetVPN (github-poc-repo)
• FortiVuln (github-poc-repo)
• Fortinet FortiOS路径遍历漏洞 （CVE-2018-13379）批量检测脚本 (github-poc-repo)
• This module massively scan and exploit a path traversal vulnerability in the FortiOS SSL VPN web portal may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests (CVE-2018-13379). (github-poc-repo)

…and 27 more exploits

Timeline

• Aug 27, 2019 CVE Published
• Sep 9, 2022 CVE Updated

References

• https://www.exploit-db.com/exploits/47287 url
• https://fortiguard.com/psirt/FG-IR-18-384 url
• https://www.cvedetails.com/cve/CVE-2018-13379/ url
• https://nvd.nist.gov/vuln/detail/CVE-2018-13379 url