CVE-2018-13378

An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.

Score

CVSS 3.0 7.2 High

Status

Modified - psirt@fortinet.com

Published

2019-04-17

Last modified

2024-10-25

Weaknesses

CWE-200

Affected products

• Fortisiem (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-18-382