Fortigate SSL VPN 路径遍历漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://stack.chaitin.com/vuldb/detail/8704843f-547c-4270-aa5f-451d945ec92d
• https://github.com/B1anda0/CVE-2018-13379
• https://zhuanlan.zhihu.com/p/579742567
• https://www.tenablecloud.cn/plugins/nessus/128552
• https://juejin.cn/post/7614036943889858566
• https://avd.aliyun.com/detail?id=AVD-2018-13379
• https://www.cnblogs.com/m1n0s/p/15030038.html
• https://security.bnu.edu.cn/ldgg/105756.html
• https://nvd.nist.gov/vuln/detail/CVE-2018-13379
• https://www.fortiguard.com/psirt/FG-IR-18-384
• https://www.fortinet.com/blog/psirt-blogs/fortios-ssl-vulnerability
• https://github.com/kh4sh3i/CVE-2018-13379
• https://www.tenable.com/plugins/nessus/128552
• https://www.acunetix.com/vulnerabilities/web/fortigate-ssl-vpn-arbitrary-file-reading-cve-2018-13379/

Related Vulnerabilities

• PoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration Detection
• Fortinet FortiOS等 签名验证不当漏洞
• PoCCVE-2015-1880: Fortinet FortiOS <=5.2.3 - Cross-Site Scripting
• PoCCVE-2016-3978: Fortinet FortiOS - Open Redirect/Cross-Site Scripting
• PoCCVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting
• PoCCVE-2017-3131: FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting
• PoCCVE-2017-3132: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
• PoCCVE-2017-3133: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
• PoCCVE-2018-13379: Fortinet FortiOS - Credentials Disclosure
• PoCCVE-2018-13380: Fortinet FortiOS - Cross-Site Scripting
• PoCCVE-2022-40684: Fortinet FortiOS admin 远程命令执行漏洞