Sploitus

Exploit for Path Traversal in Fortinet Fortiproxy

githubexploit · 2019-08-11

Exploit Code

README13 lines
## https://sploitus.com/exploit?id=118C1A6E-D8BF-59DF-95E7-7A953218F19D
# CVE-2018-13379
CVE-2018-13379
  
https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html    
https://fortiguard.com/psirt/FG-IR-18-384  
    
The below versions of FortiOS were vulnerable.  
```
FortiOS 5.6.3 to 5.6.7
FortiOS 6.0.0 to 6.0.4
ONLY if the SSL VPN service (web-mode or tunnel-mode) is enabled.
```