CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 21โ21 of 21 advisories (Page 2/2)
2019-01-22
Fortinet FortiOS and FortiADC LDAP Credential Exposure Vulnerability (CVE-2018-13374) Analysis and Mitigation Guide
[Affected Scope] Enterprise network environments running FortiOS 6.0.2, 5.6.7 and before, or FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4
[Impact] An authenticated attacker can redirect LDAP connectivity test requests to a rogue LDAP server, exposing configured LDAP administrator credentials in plaintext or reversible format
[Mitigation] Upgrade FortiOS and FortiADC to the latest patched versions immediately and restrict administrative access using trusted host configurations