{"cvss":9.1,"datePublished":"2022-01-10","dateUpdated":"2022-01-10","description":"An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.","dueDate":"2022-07-10","id":"CVE-2018-13382","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382","product":"FortiOS and FortiProxy","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Fortinet FortiOS and FortiProxy Improper Authorization","vendor":"Fortinet"}