CVE-2018-13374Disclosure(fortinet / fortiadc)

LOWCVSS 4.3 · MEDIUMCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.

fortinet CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-09-29. Apply updates per vendor instructions.

Vendor / third-party advisories

Other references

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13374

Weakness type (CWE)

CWE-732

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

fortiadc
fortios

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 1 mentions (2026-06-12); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

fortinet

Products

fortiadcfortios

1 version affected across 2 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets1 URL

By indicator

https://patchdayalert.com/blog/fortinet-cve-2018-13374-test-connection-leaks-credentials/?utm_source=twitter&utm_medium=social&utm_campaign=auto-drip&utm_content=fortinet-cve-2018-13374-test-connection-leaks-credentials

Classification over time

Date	Total	Labels

2026-06-12	1	Disclosure1
2026-06-27	1	General1

Full discourse2 posts

PatchDay Alert@patchdayalert137d
Disclosure
That 'test connection' button in your FortiGate just handed your LDAP credentials to an attacker. CVE-2018-13374 shows why diagnostic features that transmit stored secrets are a design trap. https://patchdayalert.com/blog/fortinet-cve-2018-13374-test-connection-leaks-credentials/?utm_source=twitter&utm_medium=social&utm_campaign=auto-drip&utm_content=fortinet-cve-2018-13374-test-connection-leaks-credentials
Post summary
The post highlights that the FortiGate “test connection” button leaked LDAP credentials via CVE‑2018‑13374, exposing a design flaw in diagnostic features that transmit stored secrets.
3001047
52 followersView on X
AHANONYE@Claver042122d
General
Key Sysmon Event IDs Used: Event ID 1 – Process Creation, Event ID 8 – CreateRemoteThread and Event ID 11 – File Create. As part of the investigation, I also researched the vulnerabilities associated with the attack chain: CVE-2018-13374 – Fortinet FortiOS SSL VPN Path Traversal,
Post summary
The statement references CVE-2018-13374 and identifies it as a Fortinet FortiOS SSL VPN Path Traversal vulnerability, but provides no additional details such as a PoC, exploit code, or patch information.
1000036
304 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	fortinet	fortiadc	-	-	-
App	fortinet	fortiadc	6.1.0	-	-
OS	fortinet	fortios	-	-	-

Explore more

Back to dashboard fortinet CVEs fortiadc vulnerabilities