CVE-2018-13376

CVE-2018-13376: vulnerability in Fortinet FortiOS

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.1%
exploitation probability
2.1%top 19% of all CVEs
observed exploitation
nono source reports it
An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.
Affected products
Fortinet, Inc. · Fortinet FortiOS
Related CVEs — Fortinet FortiOS

In the same product, most dangerous first.

CVE-2017-3133—CVE-2017-3133EPSS 10.7%CVE-2017-3132—CVE-2017-3132EPSS 8.1%CVE-2017-3131—CVE-2017-3131EPSS 7.7%CVE-2017-3130—CVE-2017-3130EPSS 1.4%CVE-2017-7735—CVE-2017-7735EPSS 0.8%CVE-2017-7734—CVE-2017-7734EPSS 0.8%
References
https://fortiguard.com/advisory/FG-IR-18-325https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txthttp://www.securityfocus.com/bid/106036