CVE-2018-13374CISA KEV: Actively Exploited

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Published Sep 8, 2022·Updated Sep 8, 2022

Description

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.

Public Exploits & PoCs1 found

PoC: conti-ransomware-writeup

Conducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows Security, Sysmon, and IIS log sources to reconstruct the complete attack chain. Identified three exploited CVEs (CVE-2020-0796, CVE-2018-13374, CVE-2018-13379), located a trojanised cmd.exe

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free