CVEvulnerability

CVE-2018-13376

7.5 HIGH Published 2018-11-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.

Affected configurations

• fortinet fortios (<= 5.2.12) • fortinet fortios (>= 5.4.6 <= 5.4.7) • fortinet fortios (>= 5.6.1 <= 5.6.3)

References