[FortiOS] multiple pre-auth XSS vulnerabilities on SSL VPN Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-18-383 Final 1 1 2019-11-26T00:00:00 Current version 2019-11-26T00:00:00 2019-11-26T00:00:00 Failure to sanitize the error or message handling parameters in the SSL VPN web portal may allow an attacker to perform a Cross-site Scripting (XSS) attack. Execute unauthorized code or commands FortiOS 6.0.0 to 6.0.4FortiOS 5.6.0 to 5.6.7FortiOS 5.4.0 to 5.4.12FortiOS 5.2 branch and below Upgrade to FortiOS 5.4.13, 5.6.8, 6.0.5 or 6.2.0 and above.Workarounds:For workaround on the unfixed versions, if the SSL-VPN web portal feature is enabled, disable the SSL-VPN web portal service by applying the following CLI commands:For FortiOS 5.0 and below branches:config vpn ssl settingsset sslvpn-enable disableendFor FortiOS 5.2 and above branches:config vpn ssl settingsunset source-interfaceendRevision History:05-24-2019 Initial Version11-26-2019 New fix on 5.4.13 released. Fortinet is pleased to thank Meh Chang and Orange Tsai from DEVCORE Security Research Team for reporting this vulnerability under responsible disclosure. CVE-2018-13380 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N/E:F/RL:X/RC:X https://fortiguard.fortinet.com/psirt/FG-IR-18-383 [FortiOS] multiple pre-auth XSS vulnerabilities on SSL VPN Reference>