CVE-2018-1360

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published
Apr 25, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136007.5The mintToken function of a smart contract implementation for AMToken, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136017.5The mintToken function of a smart contract implementation for GalacticX, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136027.5The mint function of a smart contract implementation for MiningToken, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-136037.5The mintToken function of a smart contract implementation for Briant2Token, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-136047.5The mintToken function of a smart contract implementation for wellieat, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136057.5The mintToken function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken), an Ethereum token, has an intCVE-2018-136067.5The mintToken function of a smart contract implementation for ARChain, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136077.5The mintToken function of a smart contract implementation for ResidualShare, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136087.5The mintToken function of a smart contract implementation for archercoin, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-136097.5The mintToken function of a smart contract implementation for CSAToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-13616.1IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code iCVE-2018-136107.5The mintToken function of a smart contract implementation for MedicayunLink, an Ethereum token, has an integer overflow that allows the owne