---
id: "CVE-2018-13374"
kind: "vulnerability"
aliases: ["CVE-2018-13374"]
title: "A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to\u2026"
severity: "high"
cvss: 4.3
epss: 0.38088
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Fortinet FortiOS and FortiADC", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "fortinet fortiadc", "fixed": ["5.4.5"], "affected": ">= 5.4.0, < 5.4.5", "ecosystem": "vendor"}, {"name": "fortinet fortiadc", "fixed": ["6.0.2"], "affected": ">= 6.0.0, < 6.0.2", "ecosystem": "vendor"}, {"name": "fortinet fortiadc", "fixed": [], "affected": "= 6.1.0", "ecosystem": "vendor"}, {"name": "fortinet fortios", "fixed": ["6.0.3"], "affected": "< 6.0.3", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "fortiadc", "fortigate", "fortios", "infrastructure", "ransomware", "self-hosted"]
not_affected_if: ["no-ldap-configured", "unpatched-version-not-in-range"]
published_at: "2019-01-22T14:29:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13374", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-13374", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13374", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to…

Fortinet FortiOS and FortiADC have an improper access control flaw in the LDAP server connectivity test. An attacker can point that test at a rogue LDAP server and collect the LDAP bind credentials configured on the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Fortinet FortiOS and FortiADC affected ? fixed ?
- vendor:fortinet fortiadc affected >= 5.4.0, < 5.4.5 fixed 5.4.5
- vendor:fortinet fortiadc affected >= 6.0.0, < 6.0.2 fixed 6.0.2
- vendor:fortinet fortiadc affected = 6.1.0 fixed ?
- vendor:fortinet fortios affected < 6.0.3 fixed 6.0.3

## Fix

Apply the updates from Fortinet's vendor advisory, as CISA requires; the fixed versions are not stated in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13374
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2018-13374
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2018-13374

## From the sources

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_