{"id":"CVE-2018-13376","state":"PUBLISHED","title":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing","description":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.","publishedAt":"2018-11-27T15:00:00.000Z","updatedAt":"2024-10-25T14:31:22.847Z","severity":null,"assigner":"fortinet","products":["Fortinet, Inc. Fortinet FortiOS"],"affected":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/106036","https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","https://fortiguard.com/advisory/FG-IR-18-325"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:17.855Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/13xxx/CVE-2018-13376.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-13376","state":"PUBLISHED","datePublished":"2018-11-27T15:00:00.000Z","dateUpdated":"2024-10-25T14:31:22.847Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2018-07-06T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response."}],"affected":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/106036","name":"106036","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","tags":["x_refsource_MISC"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-325","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Information disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"fortinet","dateUpdated":"2018-12-17T14:57:01.000Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8"},"datePublic":"2018-11-27T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@fortinet.com","ID":"CVE-2018-13376","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Fortinet FortiOS","version":{"version_data":[{"version_value":"FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions"}]}}]},"vendor_name":"Fortinet, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information disclosure"}]}]},"references":{"reference_data":[{"name":"106036","refsource":"BID","url":"http://www.securityfocus.com/bid/106036"},{"name":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","refsource":"MISC","url":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt"},{"name":"https://fortiguard.com/advisory/FG-IR-18-325","refsource":"CONFIRM","url":"https://fortiguard.com/advisory/FG-IR-18-325"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/106036","name":"106036","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-325","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T09:00:35.117Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-24T20:09:58.734329Z","id":"CVE-2018-13376","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-25T14:31:22.847Z"}}]}}}