{"cvss":9.1,"datePublished":"2019-10-02T00:00:00Z","dateUpdated":"2019-10-02T00:00:00Z","description":"An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.","dueDate":"2022-07-10T00:00:00Z","id":"CVE-2018-13382","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"FortiOS and FortiProxy","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"Fortinet FortiOS and FortiProxy Improper Authorization","vendor":"Fortinet"}