CVE-2018-13376

EPSS 2.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 nov 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.

Produtos afetados

Fortinet, Inc. · Fortinet FortiOS

Referências

https://fortiguard.com/advisory/FG-IR-18-325 https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt http://www.securityfocus.com/bid/106036