automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -16792,6 +16792,56 @@
     },
     "needs_cleanup": false
   },
+  "auxiliary_gather/fortios_vpnssl_traversal_creds_leak": {
+    "name": "FortiOS Path Traversal Credential Gatherer",
+    "fullname": "auxiliary/gather/fortios_vpnssl_traversal_creds_leak",
+    "aliases": [
+
+    ],
+    "rank": 300,
+    "disclosure_date": null,
+    "type": "auxiliary",
+    "author": [
+      "lynx (Carlos Vieira)",
+      "mekhalleh (RAMELLA Sébastien)"
+    ],
+    "description": "Fortinet FortiOS versions 5.4.6 to 5.4.12, 5.6.3 to 5.6.7 and 6.0.0 to\n          6.0.4 are vulnerable to a path traversal vulnerability within the SSL VPN\n          web portal which allows unauthenticated attackers to download FortiOS system\n          files through specially crafted HTTP requests.\n\n          This module exploits this vulnerability to read the usernames and passwords\n          of users currently logged into the FortiOS SSL VPN, which are stored in\n          plaintext in the \"/dev/cmdb/sslvpn_websession\" file on the VPN server.",
+    "references": [
+      "CVE-2018-13379",
+      "URL-https://www.fortiguard.com/psirt/FG-IR-18-384",
+      "EDB-47287",
+      "EDB-47288"
+    ],
+    "platform": "",
+    "arch": "",
+    "rport": 10443,
+    "autofilter_ports": [
+      80,
+      8080,
+      443,
+      8000,
+      8888,
+      8880,
+      8008,
+      3000,
+      8443
+    ],
+    "autofilter_services": [
+      "http",
+      "https"
+    ],
+    "targets": null,
+    "mod_time": "2021-02-26 14:04:00 +0000",
+    "path": "/modules/auxiliary/gather/fortios_vpnssl_traversal_creds_leak.rb",
+    "is_install_path": true,
+    "ref_name": "gather/fortios_vpnssl_traversal_creds_leak",
+    "check": false,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+    },
+    "needs_cleanup": false
+  },
   "auxiliary_gather/get_user_spns": {
     "name": "Gather Ticket Granting Service (TGS) tickets for User Service Principal Names (SPN)",
     "fullname": "auxiliary/gather/get_user_spns",